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"}, 0x7c1) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7ffe}, @device_b, @from_mac, @device_b, {0x9, 0x4}}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:39:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 07:39:44 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x4) 07:39:44 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x408040, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002540)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) dup2(r2, r0) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) writev(r1, &(0x7f0000002480)=[{&(0x7f0000000100)="574abf32febe6138357979c87b9188df6122184e5d6b3d4acf8292739268e3160d7d7634501c3436dfd612116d50c241c59c1f2bd18c1329c84667f596191133e9c3177b19d7ee69ea946725b9b748aff92ce28a85180d659e3b4d02704b260d9648da75c112de70db9a9a06d6f8223fce13890b6b61b4d2fcfd35d1cacd143e0bd40cda9d1217a6dfb149e256aa8b293399b7d9d012ff30eaa31b491f8262f290191cbf861d21a2918bb4638447916daa3ab14aa034a70aa7d639c70b48289f1f0467010515f4290b254e4e6447", 0xce}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000000)="e325d9ea15e71a389ebbee5c61db4666e017c152a3b4aee9079666c50788d91f36d2b5bade0b8551d1e229c8fff89ac93e11c8e8e761b7761e441f5c4819", 0x3e}, {&(0x7f0000000200)="a5b8bdeff97facb7d4490d91f995e7eafa446d6ba126d414529a2bd7d722632eec0912cf0bae06d395934eff2a7fd31fdaede388b1bd802ec077193b526a217facd2b346faa97747cabb5e02a0c32eab9557566b9dce5b1a8e6946e1fcda0898d2f3c5b0c90bddd8880674343fdd438cb3725f111743a6352b52392e48508c52ae63a93cb0452a73d055fc690f09c3", 0x8f}, {&(0x7f0000000040)}, {&(0x7f00000013c0)="905db3ff1a37fd0af3ec4d05ade8789ded26f4f7faf6a6aaacb8e17f6e5f52b0ebd78d48713eea37c6b7fa33c832ee6722a043ca46c90e72d8020269365b795bf36f693c3df31418f964d0fe90cc1a82d0bdb4a28c175f67666d93cc95c70a9450edfd57210022ac61cd89736c38ab3ac7e7e88e238b6874c929b666e33fc10d116c7cc3731c6ebe7dcbb3a037b57914d9a8a93a49d28680e96d977704cf450ab4e71082384d92d84f058b48253dc49887ee5c6ac6", 0xb5}, {&(0x7f0000000080)="88ef47f4920ec4fb7b66262fd68ac7", 0xf}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f00000002c0)="baf7bfb3337d289064290cfc2247ac6fa6479ef0eac3c01e8df86aaf2b28f668ce52750c8dd6903e295f7fb18c238eff3ef854e9bff78e353e69facaac850c293fb8e532b1519cd1ab2279d30d16e458a4cc472a1f6b485fd9e870577dfef2c393e7d68279f7260389a04b476f7608c3bf6078a49b", 0x75}], 0x9) 07:39:44 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x133f}}}}}}, 0x0) 07:39:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1c) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 07:39:44 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000040)=0xffffffff, 0x1, 0x0) pkey_mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x7, 0xffffffffffffffff) 07:39:44 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r3 = syz_io_uring_setup(0x2262, &(0x7f0000000240)={0x0, 0xc4f7, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x6, 0x0, r4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0xffffffffa064a67c, 0x400, 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x3, {0x0, r2}, 0x6, 0x6, 0x0, {0x0, r4, r5}}, 0x8) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r6, &(0x7f0000000040)=""/190, 0xbe) io_uring_setup(0x50a5, &(0x7f00000001c0)={0x0, 0x8a82, 0x8, 0x2, 0x35d, 0x0, r2}) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) [ 1135.453487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:39:44 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) [ 1135.459591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:39:44 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) sigaltstack(&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000040)) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8001, &(0x7f0000000000)=0xffffffff, 0x205, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000080)=""/82) madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x7c) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000100)=""/209) 07:39:44 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1400}}}}}}, 0x0) [ 1136.261771] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1136.293924] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1136.295027] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1136.297726] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1136.301981] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1136.307548] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:39:56 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x7000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:39:56 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 07:39:56 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x2000}}}}}}, 0x0) 07:39:56 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0xdb6d, &(0x7f0000000080)=0x2) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4, 0x2}, 0x6) 07:39:56 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7ffe}, @device_b, @from_mac, @device_b, {0x9, 0x4}}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:39:56 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r3 = syz_io_uring_setup(0x2262, &(0x7f0000000240)={0x0, 0xc4f7, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x6, 0x0, r4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0xffffffffa064a67c, 0x400, 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x3, {0x0, r2}, 0x6, 0x6, 0x0, {0x0, r4, r5}}, 0x8) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r6, &(0x7f0000000040)=""/190, 0xbe) io_uring_setup(0x50a5, &(0x7f00000001c0)={0x0, 0x8a82, 0x8, 0x2, 0x35d, 0x0, r2}) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 07:39:56 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x5, 0x0, "e68b98", 0x1, 0x9}) 07:39:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x28, &(0x7f0000000000)=0x9, 0x4) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @remote}, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) r2 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x100, 0x7, &(0x7f0000000680)=[{&(0x7f0000000100)="dedfc5c4661f2cfeb5a0e793412ad065b5c0afeb003a0d404827f252622354ef4baff7d8196e51ed946645230b8c501445e2575342c9f7044b7a3f01d97a2d7e7bb132d8e69452339a39e3d7f8ca07e6fd348ee2521980837f351c5769b2c1b3c8e78f9177f530ef0a71e0114c1f2b4f2ce452a6e5e9db86e1da451e8e6c0a7b02d758dcaca0ae216cb9baff20cb7cb5d582baa1", 0x94, 0x7fffffff}, {&(0x7f00000001c0)="ca2ea9cf6338b1e7c71e6ec46f793719b631db2da7b9a3d1b56a177d4b79fa11f88948", 0x23, 0x1}, {&(0x7f0000000200)="86cbd01c36438c9eecbc0da9c70d476e25afaa28945562acf206377f35d644cc49bc56a922e91c1bf0ce944154ee38e2ee235a18eb1e3fa4df127e4a441731b068707e9bf3cfd31bc4d341fb492a757cf471be9b70cc29c5bae888c33c784cd4931235e281c765e9118b84cdaf98", 0x6e, 0x5}, {&(0x7f00000003c0)="e8ff502c4b11f8c5889b06fd7780d7863d85b8a035da719d1a327d5bcb5b2e618140b70dccfa9a55dd65e7fc2a446527624744b4da9c98927d1f398d4b5d0a88482ff5f325a1e01bff7ffbd572ac686b995d68b16afb665ce071e05bccbdcc440bf8f29cf2e756348afc1e12845224fe2ad6e69efb3b1dfbbb4391fcfb475943d9de81522f34f80dbebb520a30e7596349965589d97d1baad1e8ee710d2d3fde8e0e973aa99ca415ad9dcd44a4e1850323b5106e5bb0b179625d93ca1f21fc5ca696546d1ddb8ebf51e30e0de5962c701b98e211bb2e8dd5e0a8", 0xda}, {&(0x7f0000000280)="e32d268f5d3c8ad8eb06b35b3b35f701ef7a627665742ff05e20c3ae8cd7fdfc2bebb29f502019ada65ae2a383fd8c332c2b0b211b8a266c674619bb240e60bd6419977ffb9fd8bd473033fbb3ee708b51a66cce7be59b8feba5", 0x5a, 0x8000}, {&(0x7f00000004c0)="63d175b200cf0ccdf39180151598433bd67df522e5f684474fb1ad41e6c7dce3629dd44df032a57a95b094c50f13deefd180c9a94d0a7f9d48a0aa8db0eb8aaf868acc95f0ec339b6ddc58a562042dae3682dbdef6994133e57506e8cf531257613159c84b80095a2ac72c60aa0ac36dbd633e276e9cef52f2f51da8ce515edfd19361994180cc583999581613d77181", 0x90, 0x3}, {&(0x7f0000000580)="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", 0xfa, 0x9}], 0x881080, &(0x7f0000000740)=ANY=[@ANYBLOB="686964652c6d6561fc58e87d2c61707072616973652c009d67ac33ef86c03bb6a216e1526c347986d74ed3e79f8ab596e388f2406b1c3d304b6ffda80787c8fd16b454576e853995d5a0f6f1609d7b14692b8bb4aee9c76c1741404a14afebd4989f73c161ffb84a15051db553ec98dd2713b382f469c2a8bc07272d443e039b8a19e66813344b2fb5bea20f9f963f71e6aad7f5afe60405af1fd687f54fe035e70d5d"]) dup2(r1, r2) r3 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r3, 0x0, 0x0) [ 1147.002897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1147.006952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1147.011457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:39:56 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 07:39:56 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x2800}}}}}}, 0x0) 07:39:56 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0xffffffff, 0x202, 0x0) 07:39:56 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 07:39:56 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x2f00}}}}}}, 0x0) 07:39:56 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 07:39:56 executing program 5: r0 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0xf000) shmdt(r0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/90, 0x5a, 0x1, &(0x7f0000000100)=""/252, 0xfc}, &(0x7f0000000200)=0x40) 07:39:56 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x3f13}}}}}}, 0x0) [ 1147.789537] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1147.791632] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1147.813729] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1147.814525] Bluetooth: hci5: Opcode 0x0401 failed: -4 [ 1147.837307] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1147.844022] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1147.846969] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1149.093252] Bluetooth: hci5: command 0x0406 tx timeout 07:40:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80108906, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_S2RAM(r2, 0x3305) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f80)={0x18, r3, 0x1, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x98, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x98}}, 0x44) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) r5 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_RMID(r5, 0x0) 07:40:05 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4040}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = getpid() r2 = gettid() ioprio_get$pid(0x2, r2) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x8, 0x8, 0x8, 0x80, 0x0, 0x7fff, 0x5c806, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x5e, 0x8}, 0xc02, 0x3, 0x4d4, 0x8, 0x53f, 0x4db2, 0x7f, 0x0, 0x0, 0x0, 0xa}, r2, 0x7, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x80, 0x7, 0x5, 0x0, 0x6, 0x200, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000040), 0xc}, 0x40000, 0x173d, 0x8, 0x4, 0x3, 0x1a7, 0x8a3a, 0x0, 0x403, 0x0, 0x3cb926fe}, r1, 0x6, r3, 0x8) r4 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) r5 = socket(0x27, 0x2, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0xd, &(0x7f0000000240)="ac58215f29c35d9ec2ab19efeb6115e53e8a1670d7e6b3bc27423957c3b9d362e3e170e580f664c35621a73b86cb09b0b1b39950bd2f125650fa4851a68877dd4a", 0x41) read$ptp(r4, 0x0, 0x0) pread64(r0, &(0x7f0000000180)=""/189, 0xbd, 0x0) 07:40:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x1c) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 07:40:05 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7ffe}, @device_b, @from_mac, @device_b, {0x9, 0x4}}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="30b619d48548867a081ec2ed880c686b2fee530b54b69bc894c2394f0b48567943e619bb3753ab149ea31a7c88bdc5011c3e76a849281416b8bb1d54f5894cb18fc1788b7b90277785a836d546ce9a05981dd6c7a4ee578da4765ae7219b1b2e602726a1976b403d7feb57e3c72118af5b7cadb0deaf6a069373cebb5e4c113aa8aaf3cf9bf16683d661f9f081b5f338566c1b011c47bdee03e1ce5dbac9391ea06cc2326a5c2bf1f125ccc2eb922a8b6b33da62f47a4f6883d89b7b586602391ce17b9d567a23012e912085ba11278722dd4ec2c716ae5cd88317b718dde7a9892542c43986cdc489ad8814c4a922ee0dd1cec042398b3c5b587e6c6d9c748253594cbbaa26861ee41de2bcc48ca2247e006deffc8fda87ee1a381df52e267f1367e871c6098182fd0780c75a471fd6b139d729b0eab8538e6c3619a4ae23513e9d17719f2ce7cfcce7abff61aac656c68cdef06928e62e7baf45fdf492cb8419a4ff239b70e352f2e5b09b4bbd521d6d586fc8bff2e46e66a77377d309489e4f4b791622fbb704ff6a18ffdfcd9166086a54a9eaee49c74d9713f3843142ef314b665571b3a8400ca93139d0d6cb839a1b0b46efa13f5dac91e014fb5727862e5284b61dcf73217ee2ed5c8d32765ae2a23e90fb6cf778be6ebe561a583b9bb6932d61143baf2f1864dc2350bdfe61587599de3d4a2bb6c501d3e4cc2017b106499e10dee2515bcc540d7665b15972925f10f27067dd599e847fddd257609db34d23857946b92cf29a4b8dbfd16c301663de9adb6ed8405a8685ad3e847cea97328f40efb8788de95cb71adcabe40631e9e82d30d048ec586bc4af2348d8f70ddf606339f0a3ef4d3e9ccd0a5dfdfb726daf53da373877142b35bce3a13695048614a61b6a0782128123fb35990b64dcc5f4c33f361270c01cbf0e892c7f212881f6d03a1165cf70846c59c21e36db0d08120a43c8414db6669053d4ec052baac1bca2b130dfbf490475a73514068202db02636588d607954d9e4ba99e6d1f05d672d98261f0cddab85e3f0b0d909108d29549a9d22ab310e6c296ec89db9ecd1aa7033b683c1cdb92c4be76f6ac82e4e0ab938b2e"}, 0x354) 07:40:05 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r3 = syz_io_uring_setup(0x2262, &(0x7f0000000240)={0x0, 0xc4f7, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x6, 0x0, r4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0xffffffffa064a67c, 0x400, 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x3, {0x0, r2}, 0x6, 0x6, 0x0, {0x0, r4, r5}}, 0x8) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r6, &(0x7f0000000040)=""/190, 0xbe) io_uring_setup(0x50a5, &(0x7f00000001c0)={0x0, 0x8a82, 0x8, 0x2, 0x35d, 0x0, r2}) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 07:40:05 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0x0, @perf_config_ext, 0x0, 0x0, 0x7, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448c9, 0x0) 07:40:05 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x4000}}}}}}, 0x0) 07:40:05 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) [ 1156.425141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1156.432576] random: crng reseeded on system resumption [ 1156.443574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:40:05 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) [ 1156.448691] Restarting kernel threads ... [ 1156.450927] Done restarting kernel threads. [ 1156.461212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1156.476979] random: crng reseeded on system resumption 07:40:05 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x8, 0x1, 0x1, 0x100, 0x3, 0x3e, 0x400, 0x336, 0x40, 0x33, 0x9, 0xfffa, 0x38, 0x1, 0x2}, [{0x1, 0x162, 0x1f0000000000, 0x9, 0x4, 0x81, 0x6}, {0x5, 0x200, 0x4, 0x1ff, 0x7, 0x7, 0x1, 0x94}], "5f4f60019818ab3178e7f0d72ab77839c3a7dcb38459e94575996c2acb1c2fd5b0f14e7b5a9ad7f0cead6ae5e3d8b0c38121a9658e94cf9f66433e3a750f7d50c760d2ba1266f4edf9cfe5c47cb5af6da5062206a584f2e9f5f5c43ea365c051ac3351fd6ab640daa65d74d0f987782f2b8ca9f975c8f552d7629d03fd7416057e55144938ca2b13baeb3b7f0f6ae8b403f88a4253233e22f6d1a01c8194c2518f3f320f23cd039f66473379d9ae80d899bac87c6d122afc21b4128434d2ed6173e68ba8fc726c399c71384c99c5f5d2decb3720d10ed8881721d5514a16fd40e65a55ed02934d5b", ['\x00', '\x00']}, 0x398) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x3f, 0x8b, 0x3f, 0x0, 0x0, 0x6, 0x14004, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xa34, 0x1, @perf_bp={&(0x7f0000000000), 0x9}, 0x200, 0xfffffffffffffffe, 0x8, 0x0, 0xa25d, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r1, 0x1) 07:40:05 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x6000}}}}}}, 0x0) 07:40:05 executing program 1: r0 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000200", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="162f66f96c653000"]) getgroups(0x3, &(0x7f0000000040)=[0xee00, r0, r1]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, r2) r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r5, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448c9, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x0, r3}}, './file0\x00'}) fstat(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x6}, [{0x2, 0x2, r7}, {0x2, 0x1, r8}], {}, [{0x8, 0x1, r9}], {0x10, 0x4}}, 0x3c, 0x1) 07:40:05 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 07:40:05 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000080)=""/221) r0 = shmget(0x0, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000180)=""/92) r1 = shmget(0x3, 0x2000, 0x10, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/6) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_RMID(0x0, 0x0) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:40:05 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xf000}}}}}}, 0x0) 07:40:05 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) [ 1157.237838] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1157.241568] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1157.435797] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1157.437359] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1157.515040] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1157.518252] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:40:16 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x12000) read$ptp(r0, 0x0, 0x0) 07:40:16 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xffff}}}}}}, 0x0) 07:40:16 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x1, 0x2) 07:40:16 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100}, 0x8040, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x8a00, 0x90, 0x8}, 0x18) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x1}, 0x6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="000005002e2f66696c653000"]) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x3, 0x3}, 0x6) 07:40:16 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 07:40:16 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7ffe}, @device_b, @from_mac, @device_b, {0x9, 0x4}}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:40:16 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r3 = syz_io_uring_setup(0x2262, &(0x7f0000000240)={0x0, 0xc4f7, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x6, 0x0, r4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0xffffffffa064a67c, 0x400, 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x3, {0x0, r2}, 0x6, 0x6, 0x0, {0x0, r4, r5}}, 0x8) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r6, &(0x7f0000000040)=""/190, 0xbe) io_uring_setup(0x50a5, &(0x7f00000001c0)={0x0, 0x8a82, 0x8, 0x2, 0x35d, 0x0, r2}) 07:40:16 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) [ 1167.153865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1167.156639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1167.159032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:40:16 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0x100000002, 0x202, 0x1) mlock(&(0x7f0000ffa000/0x2000)=nil, 0x2000) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 07:40:16 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 07:40:16 executing program 0: r0 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000200", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="162f66f96c653000"]) getgroups(0x3, &(0x7f0000000040)=[0xee00, r0, r1]) lchown(&(0x7f0000000080)='./file0\x00', 0xee01, r2) r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r5, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448c9, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x0, r3}}, './file0\x00'}) fstat(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x6}, [{0x2, 0x2, r7}, {0x2, 0x1, r8}], {}, [{0x8, 0x1, r9}], {0x10, 0x4}}, 0x3c, 0x1) 07:40:16 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x1c) ioctl$VT_ACTIVATE(r1, 0x5606, 0x101) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0x7, 0x81, 0x9, 0x5b11, 0x15, "0078cc16c7251a8a"}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000100)={0x7ff, 0x18, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) read$ptp(r0, 0x0, 0x0) 07:40:16 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r3 = syz_io_uring_setup(0x2262, &(0x7f0000000240)={0x0, 0xc4f7, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x6, 0x0, r4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0xffffffffa064a67c, 0x400, 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x3, {0x0, r2}, 0x6, 0x6, 0x0, {0x0, r4, r5}}, 0x8) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r6, &(0x7f0000000040)=""/190, 0xbe) 07:40:16 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xb000) shmget(0x3, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) shmget(0x2, 0x1000, 0x1000, &(0x7f0000fff000/0x1000)=nil) r0 = shmget$private(0x0, 0x12000, 0x78000000, &(0x7f0000fee000/0x12000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000000)=0x2f2a, 0x205, 0x2) shmget$private(0x0, 0x3000, 0x54000088, &(0x7f0000ffd000/0x3000)=nil) munlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15) 07:40:16 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 07:40:16 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) 07:40:16 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r3 = syz_io_uring_setup(0x2262, &(0x7f0000000240)={0x0, 0xc4f7, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x6, 0x0, r4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0xffffffffa064a67c, 0x400, 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x3, {0x0, r2}, 0x6, 0x6, 0x0, {0x0, r4, r5}}, 0x8) read(0xffffffffffffffff, &(0x7f0000000040)=""/190, 0xbe) 07:40:16 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 07:40:16 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x12000, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x40, 0x0, 0x3f, 0x3, 0x0, 0x6, 0x80800, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x21, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x10024, 0x100, 0x8, 0x4, 0x2, 0x2, 0x8, 0x0, 0x1ff, 0x0, 0x3}, 0x0, 0xb, r1, 0x9) read$ptp(r0, 0x0, 0x0) [ 1167.987379] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1168.138794] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:40:25 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}}}}}}, 0x0) 07:40:25 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r3 = syz_io_uring_setup(0x2262, &(0x7f0000000240)={0x0, 0xc4f7, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x6, 0x0, r4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0xffffffffa064a67c, 0x400, 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x3, {0x0, r2}, 0x6, 0x6, 0x0, {0x0, r4, r5}}, 0x8) read(0xffffffffffffffff, &(0x7f0000000040)=""/190, 0xbe) 07:40:25 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:40:25 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000140)) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x3e4, 0x1, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_NAT={0xa8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x29}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x24}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_NAT={0x238, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_NAT_TUPLE={0xec, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x39}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}}, {0x14, 0x4, @local}}}]}, @CTA_EXPECT_NAT_TUPLE={0x70, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x41}}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x48, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}]}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x8000}, 0x8050) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000000)={0x4, 0xffff, "5ebefd", 0x3, 0x27}) 07:40:25 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1f}, @initial, @broadcast, @device_a, {0xf, 0xea1}}, @random="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"}, 0x7c1) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7ffe}, @device_b, @from_mac, @device_b, {0x9, 0x4}}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:40:25 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 07:40:25 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') preadv(r1, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000080)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/241, 0xf1}, {&(0x7f00000003c0)=""/238, 0xee}, {&(0x7f00000004c0)=""/87, 0x57}, {&(0x7f0000000540)=""/176, 0xb0}, {&(0x7f0000000600)=""/220, 0xdc}], 0x6, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}, 0x60) write$P9_ROPEN(r2, &(0x7f0000000840)={0x18, 0x71, 0x2, {{0x0, 0x0, 0x7}, 0x40}}, 0x18) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x1c) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000000)) read$ptp(r0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sync_file_range(r4, 0x7, 0x0, 0x1) 07:40:25 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r3 = syz_io_uring_setup(0x2262, &(0x7f0000000240)={0x0, 0xc4f7, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x6, 0x0, r4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0xffffffffa064a67c, 0x400, 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x3, {0x0, r2}, 0x6, 0x6, 0x0, {0x0, r4, r5}}, 0x8) read(0xffffffffffffffff, &(0x7f0000000040)=""/190, 0xbe) [ 1176.167250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:40:25 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r3 = syz_io_uring_setup(0x2262, &(0x7f0000000240)={0x0, 0xc4f7, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x6, 0x0, r4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0xffffffffa064a67c, 0x400, 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x3, {0x0, r2}, 0x6, 0x6, 0x0, {0x0, r4, r5}}, 0x8) read(0xffffffffffffffff, &(0x7f0000000040)=""/190, 0xbe) [ 1176.185778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:40:25 executing program 1: r0 = gettid() migrate_pages(r0, 0x74, &(0x7f0000000180)=0x47, &(0x7f00000001c0)) wait4(r0, &(0x7f0000000280), 0x1, &(0x7f00000003c0)) ioprio_get$pid(0x2, r0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x91b8, 0x0, 0x0, 0x0, 0x0, 0xa4}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1, 0xee, 0x2, 0x8, 0x0, 0x5, 0x2448, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3bd, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x1204, 0x6, 0x0, 0x2, 0x8001, 0x3, 0x8430, 0x0, 0x1f}, 0x0, 0x0, r1, 0x1) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x10204, 0x0) ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000240)={0x1, 0x2, 0x68c, 0x4, 0x1f, 0x7fff, 0x8000}) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x8, 0x8, 0x2, 0xbf, 0x0, 0x200, 0x1000, 0x15, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa1, 0x1, @perf_config_ext={0x1, 0x2}, 0x2000, 0x8c, 0xc3, 0x2, 0x8, 0x8, 0xffff, 0x0, 0x5121, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x0) read$ptp(r2, 0x0, 0x0) 07:40:25 executing program 5: personality(0x400000d) personality(0x40000) personality(0x8) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) [ 1176.204453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:40:25 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}}}}}}, 0x0) 07:40:25 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 07:40:25 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x20801) perf_event_open(&(0x7f0000000040)={0x3ca71842effd5889, 0x80, 0x0, 0x3f, 0x9, 0x6, 0x0, 0x80, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x408, 0xfffffffffffffff9, 0x20, 0x8, 0x6, 0x580, 0x7f, 0x0, 0x40}, 0x0, 0xd, r1, 0x9) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x40, 0x1c, 0x0, 0x3f, 0x0, 0x6, 0x20000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000140), 0x15}, 0x9000, 0x1, 0x7, 0x4, 0x6, 0xfffffffe, 0x5, 0x0, 0xffff, 0x0, 0x80000001}, 0x0, 0x7, r1, 0x0) read$ptp(r0, 0x0, 0x0) 07:40:25 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, 0x0) [ 1177.072284] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1177.072414] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1177.074039] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1177.075905] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1177.077496] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1177.079455] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1178.341985] Bluetooth: hci4: command 0x0406 tx timeout [ 1180.389153] Bluetooth: hci4: command 0x0406 tx timeout 07:40:35 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x7, 0x3, 0x6) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9) 07:40:35 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x14}}}}}}, 0x0) 07:40:35 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x5b, 0xb, 0x1f, 0x20, 0x0, 0x2, 0x24280, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0xa162}, 0x10000, 0x0, 0x7, 0x4, 0x2, 0x5f1, 0x1, 0x0, 0x3, 0x0, 0x3}, r1, 0x8, 0xffffffffffffffff, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) sendfile(r0, r3, 0x0, 0xa3b0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x75701bf863c8dea9, &(0x7f0000000000), &(0x7f0000000040)=0x10) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x80, 0x40, 0xff, 0xd4, 0x0, 0xee4, 0x10000, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x20, 0x343}, 0x10452, 0x5, 0xffffffff, 0x4, 0x4, 0x8000, 0xfff8, 0x0, 0x3, 0x0, 0x7}, r1, 0x0, r2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448c9, 0x0) 07:40:35 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$ptp(0xffffffffffffffff, 0x0, 0x0) 07:40:35 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1f}, @initial, @broadcast, @device_a, {0xf, 0xea1}}, @random="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"}, 0x7c1) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7ffe}, @device_b, @from_mac, @device_b, {0x9, 0x4}}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:40:35 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r3 = syz_io_uring_setup(0x2262, &(0x7f0000000240)={0x0, 0xc4f7, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x6, 0x0, r4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0xffffffffa064a67c, 0x400, 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x3, {0x0, r2}, 0x6, 0x6, 0x0, {0x0, r4, r5}}, 0x8) read(0xffffffffffffffff, &(0x7f0000000040)=""/190, 0xbe) 07:40:35 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 07:40:35 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r3 = syz_io_uring_setup(0x2262, &(0x7f0000000240)={0x0, 0xc4f7, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x6, 0x0, r4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0xffffffffa064a67c, 0x400, 0x1}) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r5, &(0x7f0000000040)=""/190, 0xbe) [ 1186.436654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1186.443832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1186.452353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:40:35 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r3 = syz_io_uring_setup(0x2262, &(0x7f0000000240)={0x0, 0xc4f7, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x6, 0x0, r4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0xffffffffa064a67c, 0x400, 0x1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x3, {0x0, r2}, 0x6, 0x6, 0x0, {0x0, r4, r5}}, 0x8) read(0xffffffffffffffff, &(0x7f0000000040)=""/190, 0xbe) 07:40:35 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x4000) 07:40:35 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 07:40:35 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x28}}}}}}, 0x0) 07:40:35 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000000240)={0x0, 0xc4f7, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x6, 0x0, r2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r3, &(0x7f0000000040)=""/190, 0xbe) 07:40:35 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xd000) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x17) 07:40:35 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x1, 0xae, 0x8, 0x0, 0x3, 0x42009, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x1, 0x9}, 0x1, 0x80000001, 0x6, 0x8, 0xfffffffffffffffd, 0x1, 0x4, 0x0, 0x401, 0x0, 0x93a}, 0xffffffffffffffff, 0x4, r0, 0x9) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) read$ptp(r1, 0x0, 0x0) r2 = getpgid(0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x28, &(0x7f0000000000)=0x9, 0x4) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x101, 0x5, 0x5, 0x8, 0x3, 0x8]}, &(0x7f0000000240)=0x78) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @xdp, @tipc=@name, 0xff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='lo\x00'}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x315ac0, 0x0) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x9, 0x3, 0x4, 0xc1, 0x0, 0xd658, 0x10910, 0xde68605f03d14456, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x0, 0x3}, 0x40, 0x7fff, 0x1, 0x3, 0x1dd4, 0x1, 0x0, 0x0, 0xcbc, 0x0, 0x2}, r2, 0x2, r5, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r6, 0xc0603d0f, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000080)='/dev/vcsu#\x00') 07:40:35 executing program 0: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x9c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x81}, 0x804) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r1, &(0x7f0000000100)=""/238, 0xee) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read(r1, &(0x7f0000000200)=""/191, 0xbf) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, 0x0) ioctl$PTP_PIN_SETFUNC2(r3, 0x40603d10, &(0x7f0000000000)={'\x00', 0xfff, 0x0, 0x3ce2}) read$ptp(r2, 0x0, 0x0) [ 1187.306191] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1187.314441] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1187.315822] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1187.318320] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:40:47 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2f}}}}}}, 0x0) 07:40:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000000240)={0x0, 0xc4f7, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r2, &(0x7f0000000040)=""/190, 0xbe) 07:40:47 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 07:40:47 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000080)=""/75) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:40:47 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r1 = syz_io_uring_setup(0x2262, &(0x7f0000000240)={0x0, 0xc4f7, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x6, 0x0, r2) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r3, &(0x7f0000000040)=""/190, 0xbe) 07:40:47 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1f}, @initial, @broadcast, @device_a, {0xf, 0xea1}}, @random="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"}, 0x7c1) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7ffe}, @device_b, @from_mac, @device_b, {0x9, 0x4}}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:40:47 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/234, 0xea}, {&(0x7f0000001700)=""/175, 0xaf}, {&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f0000000280)=""/48, 0x30}, {&(0x7f00000002c0)=""/37, 0x25}, {&(0x7f00000003c0)=""/236, 0xec}, {&(0x7f00000004c0)=""/131, 0x83}], 0x7) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) fallocate(r1, 0x38, 0xa1, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r2, &(0x7f0000000700)="2c957ab77beafc78a6758ad66cb77fc076f4a8153cd1fa572e988b6e88d6a0554e0c92eeb78010926cd79775e615497156e1f054bee00f34028b1fad304f4167a56d25c2669850ecccc6b1e169795205b951b35cac57ea6d6d94af37ec5a2a8b4c2bb665e44cec2ebd04c2b1f2980b223d264b32226fec7a8786be527f60e57ff238c6058d6f9dfa4a8a7551b9100d6a8b98a41acb5794bed4a65252c4db02c727f97b4d762701314db80cae85e61cab4617b385cf68ca4406e999abc65e32ff99a7fad87a4905c4d9acebd7cc51d71ce40c897322881ba38e05a4911401501404a314125a9e13dbd4128af4194a2485a15b4a4a3f454cdcaea61e8910ba22fca43d93f760419211f37a75fbc82cc532b77532698869832b5ca262ea9492dfbffa4c08d06a37a427edf852aef8e03dfd1b9d071924a832eceb16f6d094c1df5f94d0f06131d068936a1139884abcbc47f2df0f56a7aa1c8b1a4b12a91a0f9d1bd96e3ad0cea3ddbbe532def4b1a2d8b5d3eed1e666aab4f97d6d7144abbd96f00ce4597f0d6741f28985f8088082962496c7acdeb5c231c29255acb3cb8ab4c6696d7ec33b3248aac1d493cc8cd3d263e8805c259d49d46cf7cc9fb52cd2ae8380ae8924481d8a182c7c0fd0fa55f0019576a09607a0e6e4e70c17c79a75e910803a1790892a678b95a403bf7d6c486cf12a4f7e7d184c40b417a99535fff5ac6fc9d0ffab5e11297fda72815047e61a379ac3d7acd0ec9bcb2e1416cffa8d8e1ac0b477ad8e37a6443d18931ceb81e83277b3a3797b6f540910cededc556faca5d2c4e539c99004e5ebd066ff93faf8a209a49649e31456aa570412f3573ae8dc6d978b40a423c300a4227e6099d0130f828477a1c9fa0c5371a166cb51f727c266dc8967773c20d115e3585af52eedd2fd3817601c9b447ea8322958c2ea3c91bb8a127606aefe884337162c1e8f6d181cca2b1a259fb63e700c8026b65f1f8f9ee6417189779270b97e924e37f4ebaacbe0ab943597119eeace8e31dfd4e23a5c7c2e05a59b316e5c5dd1d7a8df74a92454e3e81de93b31e7f6c89a7f3470656d78c6a57f4999f8c1c62e7b51aa3bc4224f9f6775a21712188538e082467fc131723e20b294c548b705e167a617729aa433d7ffc831c6ace8ce2d946d00868c46890e418d5643679305e72801da1107f01d042b85a53faa0475e120218f9f36350005d7dbf507d12052cc3eb98af15e0fd720f5c4cf7f65638fb7114059ca601753eeae45f0e804a51f9a47084e12c4c97f013199642837c7e6771a3954c3bec35e69e7c8b00656b8307ce51509dc1ca11131bd9391c84a9bed5226ca3969dc53ed98cef8e085e91c65bd22ff6b330d60854deb2683f500e1fe2a4fe42801cf034bed13d627219697f24f11c8046baae63a31f037672d871b0f295b8c6f49e128e88f1531c7aa10c5b3829c6ce31cf1c292150f7aec41669776f20129d52aea4e4698bdf18dce9322e9808ed084dcf662c87ade07967bd15f7fa05651b797adb235bc016754c76aafa84b99dddaf1b1dbc507278dcd0b5b11283ae61eae49dad8efc8623caf25191c86c529073cc63afa0cadd5c477c036e53722c7cc47a4b2138784af2d6b13bc7ef6aba292298c4114bbcc691e9afaf9d384fcefb6b5f3e589afb9cac19d4a13072ee50a1432f6cc6259a74dfb1f5a5d5aca24d31ffde64ab32d52d5e056926d6c1a4eecf6de48ec60ca8e61c90433f68a83300e19262d9aeaeaecc42847550ae339581f7ed1fafe071bab0aae1aa6c9c8c04b11fb04962634f9b1389e35f071be323c47ebf98766ab5302b4b4e7061b1c45da39fb8b72bad704049f870c5cfbe429c42af61480f6caf9dacd55022cb861b01b5f62b3be387291cd1f793905d82f30574935c560bc01951ddaeaa286ae617842cbcd4e405f29a26a877127c5cc2140a48c905a736c2a78563e0554c13d9e5566476f87fef8ad382d5f6989bf773cc69fc9de3fe249e6ea874ce0f317fc8bab8b19a219b5d3cb22fd59c061018dfebaacfdc9c8bde3028dda3f7000484e88e94f0799b4692ccc6730834203f07bb02709de5e115cf621d42217a560bcf6fd232b8e46c13e603f4e79d452b109d91525ca395d2cebf71aec1b8628507e1df05a539274418fbd5c710274bab4715efa45a6601bd820383866b644ca677f8b5e1059078155d5da534421fb943ad12381da67d9a52e99d33f24ef2a237c0c3ef90e79a852f7e48341b80cb0f57699c4abb1c2e364ce5da472a4810587a6c021e8588ce3b87fa788a590ab4fa195b24b61e314aeafe93f02f13fb1e473b28d5d431441cd62bb44c1b2c23548ccd4e8e4271fe336cb4b7d60c0271635f6e55b1ef6dc1df08076ec957ea3ebeea1a85dc6a4d74469f394cb9198d3498b27ccbd12b539a0cbac13a396d3caf017ee951a64d54d12564360ef63397a3cf5fa0239d6b3d2eed62603c46f7ea5834f82b81d3aeca9c5beb7d202531b0cb8976e4caadc5d111481ee501174a6d3b7dd247264864bd66568c46b0ef21704befe931512cb291f19c65e0222d4658b3c969b5cd5eca5acfd50e6c94136a5e2a5eaffc8305ca6b1e981ffd3c984bd2ce918727887ef78512ef87a4df5ec9eedc3bbcb9b406185f7c2bde7faf5929d23dd203a78177f5425a077dc40e553dba8456037a7b1cf913b1d103a21a41707f6de38f1d0ad7287073e37e2e2b20fbb8d8f8b4af98c4a94427e46e98a84f0f28e47906efcbd8a4f4d2653b6e033ed2b9b7dd6902856be3fe6a312b834f3f533035abbb2ec99df5259c531261f80cd0e2909f56bb0d3b9ba3b9582dd41589c9b66d9a67eba7a759d529bcc15084cab5905f263429ab5a8e678c268d76da6ce75186678f970d9a8960a0fde49ac341302811227de6cc1ec6f9bddff1d2d98db59478801018491c2f333fd77d8bbf943a887a3e1f75752d20fd03a4311252a81851eb6f79b09a1458171eb46aeeacae371d9b21268f096784acce4a33a0a0b525da1627e703cfa3aa62b58de9508322df85468a788ba03768fad2d22cdb21b3997fca3d99a08ca32a9f915c23fd4f5e33cf62102b5fd0fa68100b0912fc665f4c8c73e8501e3bd38fb5626e315472ff7957393cf372e1da6e3dc31ded25d68d87ed6eb1f6b4373b8a2549552fcf837e434e5e8ce6d404adcf3942728ed6ae1338f4471d5c95494fad89e7261ce5ba219c4b29ccf8bd9d97152ba421b42029eca4e45f4940ca0615a802be2b6fca3fe3ea1bfa48d44b6828fe137d6bbf2ed4208def29900bdf8d1963a81f2205f0c91d155963d82033a5a4495e109237a9c2a77e92bd6269a14923f7bd58ff2161478458e3db5244446e5ff5795f3da97bf5f71b628b6d684cc76e24eaf35a90e48fd22561c9ff6938208235ac0f1b6e1b8dd98b935eb03035da6a9228dfe13eb0ee9c01b3de7a3a2ca6471e4927b14960859b30f260e937a3ded87f8aff92bdf24b304e18b8309204245422fbe140edd0ad9cc1a7293ce474fad72cb84530d1fb8b14480c33622c61c1205f4c064d074a00f3edb131ed99e1ab2d1e432cb090a9f7a9cc01fcfbcce569e283d57e55ceb524b94a70c420acc496428be780df8fc76f0c966cc1b85bc625fa040233d9aeaef983242fc7a567add96d5e9a769fcdb72ba5131e7e805b090b28bd2cf03d061b8a92c382f3cbb3d7eb0f89630ad1f2cc747847ddb8f19c050bd78b83e3d6760bce3ee5ef4b5ae941dee7c0966743d86cbd361f3c950954346b9e67d2bae53d7a724576adf1da17a2445fb565737c972dafb861f5d16e25b5630b67a5dd00f3816906eded13583ac4310e6e3cfd829ff60ebca8cc238778410b53754dc533336ea7710a64309f3461b7dec6d889ca9161038d22183191b884bc53d20f8a620c03af14941249dd02b914fbbfe0983a3a569834c34fc15d3d7adc134d295c3fad070934264ffa4d1a08b8f997f633afaa31a49e1073bdc7939e9ef4804ef57e056644e6f9f51eb86c82f1b02f4d675399221d4cd172acae897c4ba896a10cf5666bca54995a3bdb259458b8a2a4531d12b04d16dded4ffc89516ef03b2d84cf021cb9196c9716f9bb921aa3da39af4390a5ffb84ae0282fa6517add0b4df22662ac9d4b2548cca0d8e14ddf3676f4c0e5f687879eda76221dbd569dadc607bb2669c51e5b1f683b1f7ed96ab8b0950e624b15c1eab94f679c99243677bd6a96fe95fd2a1f34399bd44faf203e68a86627c330dce2d46399d764f3fd7ac5f3e7d62f4a8f1070c861d792ff4e8ca1e0c922fa9fa0c8728c7409b8f03334e791e19abfe1d9372438f9011c435b9e3cbc0a31f837575cee709c514e6cebf57947118047de764539b0923c9e65cbbcc58fd769808a8ce33d674b2a3da350fc258a7eadaa260afe0350469034a969ebc361ad9f5e158666965608b09f76dc9e10fa11c247798787a21decb11fa3eae7bc0d148661294f862e4f62cfe18c2eb61e135df29a2913d812959fdd8fbed96781ddbfdd8e41a059a3d917b9e40a0b0c36b40aec60995b0a92a639f9f8ccdff0a8a7fa879ae21cec1410f4401b4654ee9c970b0a207a0bb1261438b97b80f4ccef014303bbcc0c56b44d8dc03fde0702f95dd5d09a08a78ad4ae7b4c2bb4a962fe429b1585e7ac84f1eefe173a9e56e459a2e45a8bf17d9ddbcab7484ab76e60326a31e7a97c9a956aaba13a1c6fb899637fff68d97941bb9d8db4fe191d33b47f43e88283c5008e76db7926f8e247cb47379beb08951e9f2d0a79f44f396331945fc4c545def95abf609db16c47e68338030eb4a8924bc650e3701179891ed2d1c0a45366d59a0b4569a18b50143439ed3a028adb581344a4e6bbe5b191ab6c1d71bc701fd6fa9684c11f0c2928557a7487442ba7e2eb0a957efebc029cacaf5f43d6cb297777385a8f2f9b58f8f80d8577ba1730b44ea3f31ddc966abf209e9de037a0f9d8c4ebd955ba8a34489c42cf1563efa0f6e1552355166f1e1f148e07ca43dc6811a781f0f6cc38a2b9627f6aa96904da9432cbed2d0e6cf09557177968152f604ddc36dd4367507c713f2bdad968c7d4c38bcedef67fe0e94cae2131d997b2a9b65c161f275529e2068809b8672a07dd12e58156e8a31c16376ef9ac005a968ab96d912ba10422f4726e4ad375fa84a71f161d83b861aa04b7e6133f423506fbffef2a46fd44be8e557e9819f340fc31dd2ac3bbd7a63fe11bd109c9b4939305684b40abe000f999129dd0f68c1f56a61ac50df6cb5143a5831418dc2226a2412e598160ae3f9e32ef3acda961161e44b10f195647304f3f43d0b40aaa0e2b30704a7cf355ddbe2289654ea1ebd2c1da1db0d78179334a390db01e208ee2f2315150852e3b0f0a79192b5b4202a6a465b32c3a283ae0c4f572aa1b27552103e6f78046dcd17d19b35583e3ae846235996bff024b05fcd2d1614e2e2d1ddd2483d12a300c5cc6bfcef04fa78f17aa21cb413120c48a7370ee9b69764c537cafef7997d770450fedaa7d2bc8ac805ae687f847495be2e94eda52d2a0b5055d93f131b480c934f28e19cd5149832ebb0e704dab7ca80beb5ddbb219fddc0275d4c1326b91af350e9f2238d7183165afac282407685b25e440230c442230bb4165359f65846e848cbd9b8c065c1bead6cf348cf4ba64e0cfa91741b20c8e5dc47cf3debc447307c29063638dbdee1d24e97343c4ef63bf4b9f4fdde582b05e5be298c4a435a890855c729e88249564ba8ad52c6", 0x1000) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000600)={"92d4737dc6244a13b3ff8ff1227776b9", 0x0, 0x0, {0x8720c4d, 0x400}, {0x5, 0x7}, 0x1, [0x0, 0x3, 0x1ff, 0xfff, 0x7, 0x401, 0x676, 0x9, 0xd1, 0x16ec, 0x4af, 0x800, 0x4, 0x8, 0x7ff, 0x3e7]}) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000002, 0x1010, r1, 0x10000000) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2003, @fd_index=0x5, 0xde4, 0x9, 0x6, 0x1, 0x0, {0x2}}, 0x76a00) read$ptp(r1, 0x0, 0x0) 07:40:47 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) recvmmsg(r0, &(0x7f0000007000)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/52, 0x34}, {&(0x7f00000000c0)=""/204, 0xcc}, {&(0x7f00000001c0)=""/121, 0x79}, {&(0x7f0000007240)=""/75, 0x4b}, {&(0x7f00000013c0)=""/133, 0x85}, {&(0x7f00000002c0)=""/115, 0x73}, {&(0x7f0000001480)=""/125, 0x7d}, {&(0x7f0000001500)=""/163, 0xa3}], 0x9, &(0x7f0000001680)=""/253, 0xfd}, 0x5}, {{&(0x7f0000001780)=@hci, 0x80, &(0x7f0000002980)=[{&(0x7f0000001800)=""/229, 0xe5}, {&(0x7f0000001900)=""/67, 0x43}, {&(0x7f0000001980)=""/4096, 0x1000}], 0x3}, 0x3}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f00000029c0)=""/68, 0x44}, {&(0x7f0000002a40)=""/192, 0xc0}, {&(0x7f0000002b00)=""/84, 0x54}, {&(0x7f0000002b80)=""/75, 0x4b}, {&(0x7f0000002c00)=""/75, 0x4b}, {&(0x7f0000002c80)=""/119, 0x77}], 0x6, &(0x7f0000002d80)=""/4, 0x4}}, {{&(0x7f0000002dc0)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002e40)=""/30, 0x1e}, {&(0x7f0000002e80)=""/102, 0x66}, {&(0x7f0000002f00)=""/114, 0x72}, {&(0x7f0000002f80)=""/158, 0x9e}, {&(0x7f0000003040)=""/14, 0xe}, {&(0x7f0000003080)=""/91, 0x5b}, {&(0x7f0000003100)=""/88, 0x58}, {&(0x7f0000003180)=""/84, 0x54}, {&(0x7f0000003200)}], 0x9}, 0x7f}, {{&(0x7f0000003300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000045c0)=[{&(0x7f0000003380)=""/102, 0x66}, {&(0x7f0000003400)=""/201, 0xc9}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f0000004500)=""/190, 0xbe}], 0x4, &(0x7f0000004600)=""/35, 0x23}}, {{&(0x7f0000004640)=@nl, 0x80, &(0x7f0000004900)=[{&(0x7f00000046c0)=""/220, 0xdc}, {&(0x7f00000047c0)=""/132, 0x84}, {&(0x7f0000004880)=""/35, 0x23}, {&(0x7f00000048c0)=""/7, 0x7}], 0x4, &(0x7f0000004940)=""/172, 0xac}, 0x1ff}, {{&(0x7f0000004a00)=@nfc_llcp, 0x80, &(0x7f0000004b40)=[{&(0x7f0000004a80)=""/128, 0x80}, {&(0x7f0000004b00)=""/2, 0x2}], 0x2}, 0x80000001}, {{&(0x7f0000004b80)=@qipcrtr, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004c00)=""/20, 0x14}, {&(0x7f0000004c40)=""/114, 0x72}], 0x2}, 0x1000}, {{&(0x7f0000004d00)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006f00)=[{&(0x7f0000004d80)=""/60, 0x3c}, {&(0x7f0000004dc0)=""/4096, 0x1000}, {&(0x7f0000005dc0)=""/3, 0x3}, {&(0x7f0000005e00)=""/203, 0xcb}, {&(0x7f0000005f00)=""/4096, 0x1000}], 0x5, &(0x7f0000006f80)=""/73, 0x49}, 0x7ff}], 0x9, 0x2021, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x4, 0x3}, 0x6) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 07:40:47 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000100)=""/16) mbind(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ff9000/0x3000)=nil) mbind(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000080)=0x7, 0x80, 0x4) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f00000000c0)=0x100000001, 0xfffffffffffffff8, 0x4) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/41) r0 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) mlock(&(0x7f0000ffb000/0x1000)=nil, 0x1000) [ 1198.135975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1198.143841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1198.151554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:40:47 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/121) r1 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) r2 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmdt(r2) 07:40:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) syz_io_uring_setup(0x2262, &(0x7f0000000240)={0x0, 0xc4f7, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r1, &(0x7f0000000040)=""/190, 0xbe) 07:40:47 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60}}}}}}, 0x0) 07:40:47 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 07:40:47 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x2000) 07:40:47 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/121) r1 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) r2 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmdt(r2) 07:40:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r0, &(0x7f0000000040)=""/190, 0xbe) 07:40:47 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) [ 1199.094965] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1199.097245] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1199.099213] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1199.100687] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1199.101708] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1199.103950] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1199.105775] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1199.107257] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:40:58 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf0}}}}}}, 0x0) 07:40:58 executing program 1: r0 = msgget(0x3, 0x616) msgrcv(r0, &(0x7f0000000240)={0x0, ""/91}, 0x63, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r1, 0x0, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000001c0), 0x2, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000000)={'\x00', 0x1f, 0x1, 0x800}) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000080)={{0x7, 0x1}, {0x1, 0x7e}}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) copy_file_range(r4, &(0x7f0000000140)=0x8, r5, &(0x7f0000000180)=0x1, 0x1, 0x0) r6 = dup2(r3, r4) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x4e23, 0x7fffffff, @local, 0x400}, 0x1c) 07:40:58 executing program 3: sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="38cd66d6f025342559727c1dc7ab205756c4b38b9a61b1c3ef9915d4bac472d21bc632f03c01204f4c806cc0c6fcce97630baa498b01b0d39039885ce8b04aca4a47624a48942016edb5fa7fa875cac1d49f", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf254b0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000c00a6000400000000000000080003000000000008000300030000000800030000000000080001007063690011000200303030303a30303a31302e30000000000f00a9007365636f6e646e616d650000"], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x2400c802) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x100000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3ff, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0x3f, "8a8b28", 0x94, 0x2}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x4, 0x4}, 0x6) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) 07:40:58 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:40:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r0, &(0x7f0000000040)=""/190, 0xbe) 07:40:58 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/121) r1 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) r2 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) shmdt(r2) 07:40:58 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 07:40:58 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {0x1f}, @initial, @broadcast, @device_a, {0xf, 0xea1}}, @random="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"}, 0x7c1) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7ffe}, @device_b, @from_mac, @device_b, {0x9, 0x4}}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) [ 1209.662667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1209.679356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1209.689244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:40:58 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:40:58 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x300}}}}}}, 0x0) 07:40:58 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 07:40:58 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/121) r1 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 07:40:58 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r0, &(0x7f0000000040)=""/190, 0xbe) 07:40:59 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x133f}}}}}}, 0x0) 07:40:59 executing program 5: ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000000)) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0x9, 0x202, 0x0) mmap$binder(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x9) 07:40:59 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/121) r1 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) [ 1210.533739] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1210.535814] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1210.538314] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:41:10 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x1f, 0x80, 0x3f, 0x14, 0x0, 0x80000001, 0x106, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f00000000c0), 0xf}, 0x0, 0x1f, 0x6, 0x5, 0xeec, 0x9, 0x3, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x8) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x1, 0x80, 0x6, 0xff, 0x0, 0x8, 0x0, 0x3, 0x10004, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x1094, 0x1, 0x6, 0x1, 0xffff, 0x40, 0x1d0, 0x0, 0x5, 0x0, 0x20}) 07:41:10 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r0, &(0x7f0000000040)=""/190, 0xbe) 07:41:10 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r0, &(0x7f0000000040)=""/190, 0xbe) 07:41:10 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/121) r1 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:41:10 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1400}}}}}}, 0x0) 07:41:10 executing program 5: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x10, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:41:10 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast, @device_a, {0xf, 0xea1}}, @random="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"}, 0x7c1) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7ffe}, @device_b, @from_mac, @device_b, {0x9, 0x4}}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="30b619d48548867a081ec2ed880c686b2fee530b54b69bc894c2394f0b48567943e619bb3753ab149ea31a7c88bdc5011c3e76a849281416b8bb1d54f5894cb18fc1788b7b90277785a836d546ce9a05981dd6c7a4ee578da4765ae7219b1b2e602726a1976b403d7feb57e3c72118af5b7cadb0deaf6a069373cebb5e4c113aa8aaf3cf9bf16683d661f9f081b5f338566c1b011c47bdee03e1ce5dbac9391ea06cc2326a5c2bf1f125ccc2eb922a8b6b33da62f47a4f6883d89b7b586602391ce17b9d567a23012e912085ba11278722dd4ec2c716ae5cd88317b718dde7a9892542c43986cdc489ad8814c4a922ee0dd1cec042398b3c5b587e6c6d9c748253594cbbaa26861ee41de2bcc48ca2247e006deffc8fda87ee1a381df52e267f1367e871c6098182fd0780c75a471fd6b139d729b0eab8538e6c3619a4ae23513e9d17719f2ce7cfcce7abff61aac656c68cdef06928e62e7baf45fdf492cb8419a4ff239b70e352f2e5b09b4bbd521d6d586fc8bff2e46e66a77377d309489e4f4b791622fbb704ff6a18ffdfcd9166086a54a9eaee49c74d9713f3843142ef314b665571b3a8400ca93139d0d6cb839a1b0b46efa13f5dac91e014fb5727862e5284b61dcf73217ee2ed5c8d32765ae2a23e90fb6cf778be6ebe561a583b9bb6932d61143baf2f1864dc2350bdfe61587599de3d4a2bb6c501d3e4cc2017b106499e10dee2515bcc540d7665b15972925f10f27067dd599e847fddd257609db34d23857946b92cf29a4b8dbfd16c301663de9adb6ed8405a8685ad3e847cea97328f40efb8788de95cb71adcabe40631e9e82d30d048ec586bc4af2348d8f70ddf606339f0a3ef4d3e9ccd0a5dfdfb726daf53da373877142b35bce3a13695048614a61b6a0782128123fb35990b64dcc5f4c33f361270c01cbf0e892c7f212881f6d03a1165cf70846c59c21e36db0d08120a43c8414db6669053d4ec052baac1bca2b130dfbf490475a73514068202db02636588d607954d9e4ba99e6d1f05d672d98261f0cddab85e3f0b0d909108d29549a9d22ab310e6c296ec89db9ecd1aa7033b683c1cdb92c4be76f6ac82e4e0ab938b2e"}, 0x354) 07:41:10 executing program 1: chmod(&(0x7f0000000000)='./file0\x00', 0x188) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000006240)={0x3, 0x80, 0x9, 0x2, 0x1, 0x0, 0x0, 0x3, 0x10500, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000006200), 0x8}, 0x1980, 0xfe6, 0xa01, 0x5, 0x7, 0x5, 0x3, 0x0, 0x1, 0x0, 0x9}, 0xffffffffffffffff, 0x10, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) recvmmsg$unix(r1, &(0x7f0000004c80)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000100)=""/211, 0xd3}, {&(0x7f0000000200)=""/119, 0x77}, {&(0x7f0000000280)=""/140, 0x8c}, {&(0x7f00000003c0)=""/130, 0x82}, {&(0x7f0000000480)=""/94, 0x5e}, {&(0x7f0000000500)=""/248, 0xf8}, {&(0x7f0000000600)=""/121, 0x79}], 0x7, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/17, 0x11}, {&(0x7f0000000840)=""/226, 0xe2}, {&(0x7f0000000940)=""/83, 0x53}, {&(0x7f00000009c0)=""/208, 0xd0}, {&(0x7f0000000ac0)=""/19, 0x13}], 0x5, &(0x7f0000000b80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x88}}, {{&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000003040)=[{&(0x7f0000000cc0)=""/33, 0x21}, {&(0x7f0000000d00)=""/6, 0x6}, {&(0x7f0000000d40)=""/47, 0x2f}, {&(0x7f0000000d80)=""/2, 0x2}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/64, 0x40}, {&(0x7f0000001e00)=""/91, 0x5b}, {&(0x7f0000001e80)=""/210, 0xd2}, {&(0x7f0000001f80)=""/158, 0x9e}, {&(0x7f0000002040)=""/4096, 0x1000}], 0xa, &(0x7f0000003100)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000010000000100004000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x150}}, {{&(0x7f0000003280)=@abs, 0x6e, &(0x7f0000004600)=[{&(0x7f0000003300)=""/18, 0x12}, {&(0x7f0000003340)=""/119, 0x77}, {&(0x7f00000033c0)=""/93, 0x5d}, {&(0x7f0000003440)=""/242, 0xf2}, {&(0x7f0000003540)=""/184, 0xb8}, {&(0x7f0000003600)=""/4096, 0x1000}], 0x6, &(0x7f0000004680)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000004700), 0x6e, &(0x7f0000004c00)=[{&(0x7f0000004780)=""/215, 0xd7}, {&(0x7f0000004880)=""/152, 0x98}, {&(0x7f0000004940)=""/166, 0xa6}, {&(0x7f0000004a00)=""/200, 0xc8}, {&(0x7f0000004b00)=""/231, 0xe7}], 0x5}}], 0x5, 0x1, &(0x7f0000004dc0)={0x0, 0x3938700}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f00000062c0)={0x8, 0x8d, 0x0, 0x0, 0x2, [0x6ae, 0x2, 0x0, 0x1]}) r25 = openat$bsg(0xffffffffffffff9c, &(0x7f0000004e40), 0x2200, 0x0) move_mount(r20, &(0x7f0000004e00)='./file0\x00', r25, &(0x7f0000004e80)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000004ec0)={{0x1, 0x1, 0x18, r22}, './file0/file0\x00'}) preadv2(r0, &(0x7f0000004fc0)=[{&(0x7f0000004f00)=""/182, 0xb6}], 0x1, 0x7f, 0x5, 0x8) readv(r21, &(0x7f00000061c0)=[{&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000006000)=""/167, 0xa7}, {&(0x7f00000060c0)=""/234, 0xea}], 0x3) lstat(&(0x7f0000008340)='./file0\x00', &(0x7f0000008380)={0x0, 0x0, 0x0, 0x0, 0x0}) r27 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r27, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(0x0, r28, 0xee01) r29 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r29, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(0x0, r30, 0xee01) sendmmsg$unix(r13, &(0x7f0000008500)=[{{&(0x7f0000006300)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000067c0)=[{&(0x7f0000006380)="1806ec46ff8c21286d9dbd24451820ba0b", 0x11}, {&(0x7f00000063c0)="e22f862f04bef1fc78c314bd756c4e3d3e26b0f65d63297c86f3266df9090c980fce812322642d0197d9c682ae2ab53100c8da414e61d5be6702be0aa87df62c6e8ca018557bd8758c4a0112195611bb38b3a319d526075729982f75ccba2719ec36bee970fd2c3296f96d71818df5ead3753f5c11188e8fb9b7b3f725f7b6e04e5b0a6cd9e4693de5998d6ab7d9", 0x8e}, {&(0x7f0000006480)="8981184da240bce841f866e1ed4b7560c80c6cbca44695115a9e64faff0af992dd26e8a91b5b37e01c77022774cd191b8a0aa4b358ff93672bccf4ee88cf6eb84c2db0b0200e8022c2a675ac83300c1b731949f7", 0x54}, {&(0x7f0000006500)="d792023682dcdf86424a6fec83307a8ee7f555fb84470217dbb8f50b94fcfb4305638cb2adc141ce9308d8f8bf852314c6112d799efb737f40e5c391c688aa271f13ee4ae638e00f9c3815c39bb6752f362384be3faf90af46e7552a17d43872b8a69c8ef0a3f6102ce9da3d2239fa3f449e572183c416ad39c302a0de1f78d9433600fa902a6fcf84c1b2a53b", 0x8d}, {&(0x7f00000065c0)="e485060b971d9ecc6a9cd3e449d2d5e4359baf7a3b85d8eda30214912053ad85c1730cc56669246b0077cb26d31448fe6606d392f223f7f2928919c06ec4a294d4b171b4b1da9e95ca69d129baf33f8b070d9d43f66920a8b9a4b82ad1fafde68fcd0b08bf788377abe9567caaa532", 0x6f}, {&(0x7f0000006640)="e3e6356357705d686739e64ef9f13c8a9d9aedd2daf3764abbc743cd18ce8d169bef49f1ec028f1a868c1912833341e2ee5e70d66a88564fb960fa7bddc604b764c4c59b7d7ed3f2a237682b4bfac668309d3859f79ebaa16acb25782dd34be1359dc42cf5903c6810c3c7d5f87e8bd960a861ea31d940b318defc14367302595bcd8dd20254d4e9b96004079cffcc69a3fa039dc27e9e06e5d50a68b6", 0x9d}, {&(0x7f0000006700)="07b4354d4f9f9445dd22461f913de6f4a658f832b2467a431b6a0df9c93acfc386261c77245d1ea490a14cda6c7296957b9f4d1a3de328507389be9af7398d4123f341a7c5720b0ac6e3414882f843bb04c33bac496e04c410920e3a37e3801c37c2e270d8d7012d02a41fea611a8ab404c4d381d8b73969d524de2ce40b4bdbee9899f7cb6dd19d3365e29f04f9ea0418c264160b078d9abf39e518a6eb5e0dd6dde6404522d484006a80", 0xab}], 0x7, &(0x7f0000006940)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r6, r12, r7}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60, 0x4028800}}, {{0x0, 0x0, &(0x7f0000006b80)=[{&(0x7f00000069c0)="2fb5b5e1ac9b3ad199cb198549b1ad2e015fd189acecbac70ee3c4d50deca7f66abca823194930dda3462b729e4ed98be37acc8b6f36be04b581d1dd890387d3866196a6f1a5cd0c7db2a3f1767338c5eeca7130abffc080ff879911feeae8b7eb89fb2c959147044b721870efece2a24d627ad2dc19461a2133f141af2a3ca84d3e72a4ae048d29b4f3698148186f92b38a4fe548b8a705f978", 0x9a}, {&(0x7f0000006a80)="9c6df58eec39182e895b9982a2aae540a558667cfd1b4e18909e50708cd40c12533ac52ca7d32ff63fc09f3487afd03a143673d27858bb8c4b32b2e57cd35ec782a97db43a20b59cd16da4ebc1d554641cd72bed87f2a668c6665c8ff4166167ab5ce0281dc475b692caeaf0bd4f7708e2a8542986b34e30", 0x78}, {&(0x7f0000006b00)="07af858cfdc23d2905fd4521b412789b748d1c6c4f0979577bfd1dc39e4ab13f65475893e211e23033f4703b8783f4c383696dfaf8a8ba5c11372f6932e6f81e25a081031a08a6ac929add933cbb1d3ff056195bb1c2a2021b608c25fc4d5dab43d49ffc74b9e9cb10c923e7798ada8bbaa921ef441d2ba57b817dafe2ac026a", 0x80}], 0x3, &(0x7f0000006c80)=[@rights={{0x20, 0x1, 0x1, [r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r17, r3}}}, @cred={{0x1c, 0x1, 0x2, {r15, r10, r2}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78, 0x4000080}}, {{&(0x7f0000006d00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000006840)=[{&(0x7f0000006d80)="21bbd34333b59c921fe9b58140822d70c86973288a6d3a35fd975107ef27bebea5b18c7f13023dcd0ad3aa6da3048902d3503cebe13396645658ea96ffac848a05841e33b72dece494d678471fb7ccc87c01c3c3013fa43ded4168ad66735a64969fd962375a85cb8605ad8e10694943b50f04af86d2f7ee5af15b04ee7accae5b5443afe122c728836eb09fb3971011e2ae", 0x92}, {&(0x7f0000008640)="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", 0x11a}, {&(0x7f0000006f40)="91261a110ea16c335a4fa32a17a48b62407de7e4a4bcef95fa72216a06132a99efff943231d412f9327aec746ddec33b08ae72e1a7af7d75601958addf2a5c34f0395f69ba92f7ca1980d3f18b66b227b4f365fd5786788b21720bc267444206fff107ab10a9d5c20a31db41f94caa742d8a9d1fdec8611cb4c4713df718b83c533e63577c57f82d2c510be8fb6357119af977fdfdcc345015db51495951bc0e527e10705791483f67b2f35907fa8dbfe5d45c9e2273e4085a2148a6b0395df1314bfda6298950fe0e6f8c969f0e50e124283dadf19f97fa83494eb14b54b1710b4c25395b9aae6720701dcd50acdf73467739a616764627efe6e0c70e018aa021ec278f5a216f8948bec3cf97f032dcf94fe4bfc29b217f36981dadfec1112e67c97fba34e0a8d0c890d778c2f0aa2945748999b64f08ca261f5f804ae625e3f3d477efe36b737fb4055646ef48d7c2a84b9ef50894f52e259e4c5af638f4c290fd361a0c5b36fe5e186065b3c2493181cc9f63005458b7e5d2595fafaaeb5d0c3d9b7fcd7cf43696b526f72955145974f287318eb4c37c8862605ac05a565ed7d48fe6bf1d871642ac3fade46ce8ab6f92efb5017cc154129a5c4a0d04b0bb54ec0d4f9a6e4a22eddb731a543d55f08c4a5947b6e392129fcf444d20f518f9b5ce9c24dd8230fcae432e47f8d3c601bfd48fba362413df14c317cdb61a85f16fd51eacfb1304731dfbac0b930128bcb668abfc862c535a842aef9963053df5095ab13c9ff65f7902fbc5ae3ed190b35c37b863109247e035e260d7a5e81fefd0cbce2b9baa8a5218ce45ab88ab84e499bbc52535e246f70d8605f570dd1a69e9c25cac9775c74f7ec8c964fe819b354077e1dbd7fcf0307180826679dd5c393016fed037124d8b31d146c73d73e6f40c7e1f432f4bf15550ee630622858a0593d45b41c4867fdcfc5c54ebc173810a513cd1e66c37a8a8894d6fa6f22772e89c763d005fd73ecb85eedb5596b779dd46f10bec17fc8afee65f186b330d79a82ff0a1d69eaf11be63aab83fb17806b3f22ccc99f111d246d7008c8899b4e1197fcf45e64b7f647b91071c1ec843d96bc5cc734120df1c5f9566a25c45f1f35907b40fd485d62a62ca10c18fa8b4e6621d4707a3db37f0e2c351ac1002ef439bff817013febefa685153afb083845c65670a71e5a2e2d27939f89554ad134ba6d1c14a1f46a46c8eb6d1559de6a2b913b9ce821f48b8f4fde89b76c72610b002febf3115bc7fcdb8c148f945572407a2adbaafb41f40dd74ab915190ad6356d9c9836d02afa2caa55ba735524ef948325131c964d6b9b4a47b49b74a24b63511078856de41a23607c1eab322693c58f4b43bd93e54b78e239ddf4d8b008215851be170d9680c3321b30d5741c04867ee9ab622308a622b9921c305789a07d7dd8782138bb6782715f317ae71f4826050ab6f8547620dd37615ed512a2378ff2e57d31b0eaf6a010a3b0881f79a9ae180a361fbc6b817e8c9310f5ee285c0ae9c31b96ce4250c339f26f199a5e3c9f102708f3ca738129d0e2b692066ca0976cc3a86b76df9a655f075e6042856d5cf020e7cbed14b9afff0b8a56bb9a22497c36e6a0a2215a732f7f8ad4ab598b6c40d39b62342a80360039b221f9e2e7614d86d7ce64b5fa993f542f03dda3b3248f0948ea9a3e5f59ad82b609ca530686231f5aede61d99d09336d44adb6ccbfeb7688e9642edb32d3a78744512d00c575890ab30b1151a243c0f5e3a68bfee67622043a259f245a618310161479c74a4dfac3f6f8e6b60a3f28f675aec6eb1c11281a596880c35f21b16362bea098676afdc7e970e41ea1d85965f143e8e29c56451f62c0330a3a69e86a5373b4051442107044379a75c9d64b74ea4f0f5b8b74a1c9fd535df6f8530b9fb279325ac4e270d1b57688269c8d2f164888e9a9a4743c98aec7d74c1506eb561842491a492fd7b61e5144a775fcca017a35136e8986b50b760ee659068af548a5be4ca4dc52c48faaca2200a36bb1564ad2a3238adc7be2df61882d3123ccedd745eaed87d819b1dfadef48528350aa81fd8348e97c1bff78cd2619ce9bf1cee30bd4c77dc2e935baff20ada8eb95ef8089a85207672243ba672b522e16ee51467454ee54c040a6723dd542ef00bc2b456962730f7c9e2b8c5ace9f6baeba71adc0d37c212e19b17138aa23f966e39c178527dcf15b1f38a027c49bacc57638b37c446af7227127903b293f3e5b1df5c19533fc6c03dcc79275c2fca063f70f7962e9163269fb23dc8909d61d0e47224d236eb5ba158de056fcd895fa13a31d6872ab61a9d2cb0fb3bc77424e1f41f3d70fdde3fbcad238b2e5095b903f2ed9605cbad41d25b76f775b33f38da5b0e6e14aa11595dec253cb5103349eb2971a77b19dac99561701994c5a2f832199b2f1009bc0bd8ae79670b1f98947433cf6153ba0a7dfadeb86099ae3ce4cc5939f1998a48a8b8afca059fca8230eab86b70e1fb71f66dfd49e2905c7d5e52458df8e21b087364455ce4f1522caddc72b1dc8ea99cbd541724d0aee336ca89e1cfe1f648c936797b703159f13dcf6a1ee27ed4485ed527a65d244b27867df6cba5adf3e7a2ae11926ac4d306083a0c16b33093b5d7e4a67c6d3bf792bcc3bc8596dbe3f4e05285b83548c5c4c69f7cf71a9e0eebcd51fb7dc76503a1b7a6e53799461505448b8eef22ed0e6c7b2ab368995678b15f2250c3a17704c5ad232dcb318286fb84648beefb5c2d4512c469844626014a466f706b078c95478a0c2cec9dfa2605a4120d5eec5c9719870356e77b1f53b1ae4ef944006e7b4586e861245b72b28aa292d95b86194f0f4e958410e395d653d80dc4f19a76b7bfd4c8fbf01d189b14242fbe2c2b400b133f8f9b2123024790f376050f6357b3e5d754e2e72ad1b4b328347f140ea1a300702079a6cff0af32b095551cd7102354dbbc78c906fb096968c5474bd1f3a7004a77dcdbe01ce342dceeb21bf98e922724f835dedb19d6cae6cfbe993532d8e18967bf63a072d91bc7033420cf58c377f46d0da6b892e08cbad303ef07d9e15d6c740e58c2c10a5bb4c6a2915826af926050ec92c4b2a9b8881f502d3cd8c3349fb362aeb2c7a1286eaaf43e2cb3eccab6f3a8dbb9286cec95f7c85e70674a2e972b366eb31524ec10413ece5a28241b3e79077624fc1d31e16afc2cdf2ebf00fe9aeb4eba514e6fcc74fe50430bdc8e3818e0928f084ff7bd35f9ea2e5f86fb09cfe26da7882265ddc9813e45b005be1b61a92640431bf39ccc247e666e674c8a5b88b2487e9bbf2123132774a84fdfe54c79b398698ae7db79452f2276eab595b674e439f8e68b5fd6c2913e7250146e9cbd6ad4d237ebb641340ef0eae0ced5017af7bb59b363784ae6d369d4161fac13497f4596cba242408eb452294a01376e7be0259cdb4f51d279610342f167cb534fa3f6c6b8bcf9d6691d563b3ca7cc7c77afc35878719d2e9bcd59346b7ff85c48f97aa6cc918af4533986f288b35a23eac379c8142a3e91759fb37418f1c58c62dfa4c82a7967af2051ab58849f35f1d190cc9dbd6c54423e9d93d3f46c342c561cc1415cc2c45863e9ac7050ef52a1ad36c8904296672da0f166c39710f726ac8067cd9dd687eb187d9adcc99cb172592445a3f4ba42960024ecd1a3ee34eb7fe4350b093e520a8e9940c3a79e75795d5d496ebd62f5a06aef95ea26cf7e91a681fcd50d1aab1df2edd149959fa3f9bdd06d1c732b61bb409756b4d0c813c7e895d9600ceb97f75ee5751cd4963015ba197fe4d97c47a76d65c4858e15bdb02782eb3ef64404a92e5b54ba534bdfa83f3fc0ea0985abbbe262abf85251aff24b42b9aa236f414bb7c0f03215f4e7b7bfe97c53b283a4cf1522825a6a8d1067daa3566a44cefd42807d69a4d18575c3d53590bf13df301a3088885aeae4f0128496537646358bb47f6b666708942f96cb18e47279cb6dc88680ad894b07e30b8d566f257ce89e2f8c1168b0e23e3c3d956f959ca9be17b6a97295bef80805b8e88e1052d5d6253eb2df539be2a279103a3a35736ad5a3406ad1a51d41efa7560bec5599666aa8ff9a993f2cd5308f610f5e1a1f4aead43c4c48ade6f7a0f15d200e1379101fe78639a705be016b13ac8a2114652f3e1eab1ed39dc4ecc9d2b9c942730adcb4e58cd68fdcbf3b23cc2294617bc1ba462ad74a5ccdb4ceb1e88d030401f8d5bfd6dfbae35d9cb737531af9f69c7d0d9baa282f21951641b2082127058037f5f4c43373775bdc5ba1fb9c48003031a9a6a176a393c05b0cace8c577dbfc496c1da5a92796b3b502b75167c257fedbf7e3641771d8afd1d700e0689045bfa11404bfc0f21d73364ca52bcdcef71e735fbb7a03bf4f9581b2b7baaf0d3a27b006115d481854cb2a5e2e09d759b51bddbf2a2863dc46b3580816cedf3cfb8b82362f2e073a1741f60c9481449cc47ca82fcd9849f0f15cc63ddc673be1671bb7f5c2d5eca9d7157773b9135a7165a2083352a5f7bb1688a9ac46569380bf3c1d9371389d446f9745535243300712b1306dd255506c7c7a037ea9b572b4813688dc65641db51ba6534462bba65d70107524477b177711a83e54daff4bb0c366a958a583091d943e79ac71c7c24aa6fa69b44dac319947fcd9f21952231f233f2685be4fcfc2084e13a6ec4517f548c5f5df07c9980bd38f1616a2b9acba7bf2123b493f2bd8620ab5c6ceb8a0521c996234b8c3d4f38467edc36d0d0671256163425cfdfa7128e46707387b9fd49df94b9f462b9dd0a0bfb61f4e408e7dbd3b62033aee97cf42adbbec27bd99e8116df55da3f7b497d7908cfdef900eaafbf9e980bdfd146b69b24f047a09fc9b8703c5660d897f6f4f961d8f79620bd891c887ee689158c71eb26b5c255680cdc622a6e346b1a36ee97ce924fab84f1c6cac179b06c1efe9ab995f33fe0ab4c0dea07173a0a1b05662f29e0445bfeba460f930850bdda4ce7ccfb9996877797cc52885d77750a1dcab692b438f2b9104bda1c71e99da72b175f7280dce4be6849af4f97ca0858a2c9fbd0cd58f69581c0731abb5b5e7847b5960464d79cda3a356e90fbde5715e4d6d784c77ceefefa5e2549f6708ec474c4f60c38fbef95506b1670b19e3c3918e3183e103fffdf37bc0e7555934ef53248455b26d70b602e66c892355674250606f1484ccdc905ddf97b271fa0d64f9c21b1ded2219bd6f05c97f49a50ab1bc53f0eb74f6cf190726b33709e6b355a1d43a79e43b8950cbc0f46f77b206cc7daf7a76ba821af4838c595858d6014debbab0df897db64f45138914cbe53350c2e14671d72b9b39fc2bec869644499d5b877bea764727a0315156793c933af398cb57266bfffffc0838a8d2cbf71004a50173f0bc8d86bf32a3c5ee1fa973fa36ef3b7965d1b330f077bb13d16ee0ce4aa5c2f3017f9125c6c83c8c55f320dd6e962387b5114cb58e6709f041b530fe8ef27be724ce3f813a86904c08dd133a858f492952dcd1d2188845e7ecb959a39599cc552add5907f33c41b6c66d22cceb26b3aa7c65171d707ee88ec47c84932ac26b24db43858ce26a7909e73acde2687e39f8d14a3f202e94672cb196a30532d53867f2ad725eeda5100ec6400241264283e089228c17ce88fc6672b290ae9bb05d3652e23fa4ec94ea5ea60ccdc5d5c35b4ddd691db4ea411d729589d257bc2ca39576512597c5732fb1eca3ddc90c9b2d8", 0x1000}, {&(0x7f0000007f40)="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", 0xfb}], 0x4, &(0x7f0000008080), 0x0, 0x48005}}, {{&(0x7f0000008100)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000008240)=[{&(0x7f0000008180)="de9eaf1da03604a3c09db901c1d3472ff72066a0b43b6270cf5e84fdca63f015", 0x20}, {&(0x7f00000081c0)="d91c90691367d064a26c0734e29268fb252854ed884158de785742001ec87a5c957a322e58c91d9e4647ca07656ea8e8deeccc67798f5463abe74e1d604641356172d9c85e93142e643a751a", 0x4c}], 0x2, &(0x7f0000008400)=[@rights={{0x20, 0x1, 0x1, [r14, r18, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r9, r16}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r23, r24, r19]}}, @cred={{0x1c, 0x1, 0x2, {r6, r26, r28}}}, @cred={{0x1c, 0x1, 0x2, {r11, r10}}}, @cred={{0x1c, 0x1, 0x2, {r17, r16, r30}}}], 0x100}}], 0x4, 0x20004000) read$ptp(r1, 0x0, 0x0) [ 1221.795123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1221.801387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1221.803390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:41:11 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mlock(&(0x7f0000ffa000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:41:11 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2000}}}}}}, 0x0) 07:41:11 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/121) r1 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:41:11 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r0, &(0x7f0000000040)=""/190, 0xbe) 07:41:11 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r0, &(0x7f0000000040)=""/190, 0xbe) 07:41:11 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x9, 0x1, 0xff, 0x5, 0x0, 0x8, 0x40210, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x101}, 0x1400, 0xffffffff, 0x1, 0x1, 0x7, 0x4, 0xdf, 0x0, 0x1c2, 0x0, 0x6}, 0xffffffffffffffff, 0x4, r1, 0x3) read$ptp(r1, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x1, 0x1c}}, './file0\x00'}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/consoles\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r6, 0xc0603d0f, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448c9, 0x0) io_submit(0x0, 0x6, &(0x7f00000005c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x285, r2, &(0x7f0000000080)="efc1e3231be40975c5e1c1383669cf419e64ea3be9eefeaf17b6d35795d4edbc656099078baac94451c94aa7e8edfe307fffbef6126d022be4", 0x39, 0x7, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x3ff, r3, &(0x7f0000000140)="fcd5382174d65be94f035cdd48c29636a42fcd582197570790279e666a7cf83cacb2bf11aef50502e707e00d4cef71bfc3139ede27f75ed06c3e029b2093ba02044f5e318de559f8034732c9249c", 0x4e, 0xfffffffffffffffc, 0x0, 0x2, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, r4, &(0x7f0000000200)="93809f842e1348e3d801a6cb0a7a4c01b49bf5d084b7e230fbdd7024648749e7750c5005babcf732e1241bbea49be831452c94cf4c531fee955eff25e3fe27f1b781e519a9d64a3b3aa5b183c68b85876d7ae6a84494f7c5de3860bc31b8a6a27560827034bf6dea51db41f9c2db5a1afda2c1ddcfb22812aac38af9", 0x7c, 0x0, 0x0, 0x2, r5}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x800, r0, &(0x7f00000003c0)="4f5f60a0ffcd58bb832614351a4ff9cd0da0ba46a27b7a5fe55ad2c4b899b72d1f5a19e436c9d2583175c59d60b93a4e3100053c4d555dc25c342c8f4355ba2f58014fb80df6f118694ad366ff6319e328e45853c064d7fac31389ecabc0158c494a3a24e1af30ceb0c11eabb175190c3ec8f93ec5f48c71bb2329bcb88a8a98bf62d500853acd", 0x87, 0x6, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f0000000480)="12de995f1faf72a467a17242a07e2a89bf3c", 0x12, 0x269, 0x0, 0x0, r6}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x7ff, r7, &(0x7f0000000500)="2c8e26758fa6fe68f165210ecd5c0789b792c1e29a5e2620941bf35a360fa19dcc76681d63f056425141ad615fd25450c3986540d6588d5ad06140c0f70b5aa01c1038f35a10287b95cdddf04276", 0x4e, 0x2}]) 07:41:11 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2800}}}}}}, 0x0) [ 1222.617318] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1222.885582] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1222.887854] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1222.890600] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1222.892608] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1222.894026] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:41:23 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) 07:41:23 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/121) r1 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:41:23 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000100)={'nat\x00', 0x0, 0x0, 0x0, [0x81, 0x9, 0x400, 0x6995eea8, 0x8, 0x2], 0x6, &(0x7f0000000000)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) 07:41:23 executing program 3: r0 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x5, @perf_config_ext, 0x20, 0x0, 0xffffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x0, "ea3ec8", 0x2, 0x82}) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 07:41:23 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r0, &(0x7f0000000040)=""/190, 0xbe) 07:41:23 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast, @device_a, {0x0, 0xea1}}, @random="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"}, 0x7c1) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7ffe}, @device_b, @from_mac, @device_b, {0x9, 0x4}}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="30b619d48548867a081ec2ed880c686b2fee530b54b69bc894c2394f0b48567943e619bb3753ab149ea31a7c88bdc5011c3e76a849281416b8bb1d54f5894cb18fc1788b7b90277785a836d546ce9a05981dd6c7a4ee578da4765ae7219b1b2e602726a1976b403d7feb57e3c72118af5b7cadb0deaf6a069373cebb5e4c113aa8aaf3cf9bf16683d661f9f081b5f338566c1b011c47bdee03e1ce5dbac9391ea06cc2326a5c2bf1f125ccc2eb922a8b6b33da62f47a4f6883d89b7b586602391ce17b9d567a23012e912085ba11278722dd4ec2c716ae5cd88317b718dde7a9892542c43986cdc489ad8814c4a922ee0dd1cec042398b3c5b587e6c6d9c748253594cbbaa26861ee41de2bcc48ca2247e006deffc8fda87ee1a381df52e267f1367e871c6098182fd0780c75a471fd6b139d729b0eab8538e6c3619a4ae23513e9d17719f2ce7cfcce7abff61aac656c68cdef06928e62e7baf45fdf492cb8419a4ff239b70e352f2e5b09b4bbd521d6d586fc8bff2e46e66a77377d309489e4f4b791622fbb704ff6a18ffdfcd9166086a54a9eaee49c74d9713f3843142ef314b665571b3a8400ca93139d0d6cb839a1b0b46efa13f5dac91e014fb5727862e5284b61dcf73217ee2ed5c8d32765ae2a23e90fb6cf778be6ebe561a583b9bb6932d61143baf2f1864dc2350bdfe61587599de3d4a2bb6c501d3e4cc2017b106499e10dee2515bcc540d7665b15972925f10f27067dd599e847fddd257609db34d23857946b92cf29a4b8dbfd16c301663de9adb6ed8405a8685ad3e847cea97328f40efb8788de95cb71adcabe40631e9e82d30d048ec586bc4af2348d8f70ddf606339f0a3ef4d3e9ccd0a5dfdfb726daf53da373877142b35bce3a13695048614a61b6a0782128123fb35990b64dcc5f4c33f361270c01cbf0e892c7f212881f6d03a1165cf70846c59c21e36db0d08120a43c8414db6669053d4ec052baac1bca2b130dfbf490475a73514068202db02636588d607954d9e4ba99e6d1f05d672d98261f0cddab85e3f0b0d909108d29549a9d22ab310e6c296ec89db9ecd1aa7033b683c1cdb92c4be76f6ac82e4e0ab938b2e"}, 0x354) 07:41:23 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2f00}}}}}}, 0x0) 07:41:23 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0xffffffff, 0x200000000202, 0x3) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000040)=0x6, 0x2, 0x2) 07:41:23 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/121) r1 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) [ 1234.051516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1234.062362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1234.071586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:41:23 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) poll(&(0x7f0000000040)=[{r1, 0x20}], 0x1, 0x6) read$ptp(r0, 0x0, 0x0) 07:41:23 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r0, &(0x7f0000000040)=""/190, 0xbe) 07:41:23 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x1f, 0x80, 0x3f, 0x14, 0x0, 0x80000001, 0x106, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f00000000c0), 0xf}, 0x0, 0x1f, 0x6, 0x5, 0xeec, 0x9, 0x3, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x8) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x1, 0x80, 0x6, 0xff, 0x0, 0x8, 0x0, 0x3, 0x10004, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x1094, 0x1, 0x6, 0x1, 0xffff, 0x40, 0x1d0, 0x0, 0x5, 0x0, 0x20}) 07:41:23 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3f13}}}}}}, 0x0) 07:41:23 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r0) shmdt(r0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x4) 07:41:23 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/121) shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:41:23 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r0, &(0x7f0000000040)=""/190, 0xbe) 07:41:23 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000300)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xa2, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}, {@version_L}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000000)=0xe6bb) read(r1, &(0x7f0000000100)=""/198, 0xc6) r4 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r4, 0x0, 0x0) 07:41:23 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4000}}}}}}, 0x0) 07:41:23 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/121) shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) [ 1234.929324] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1235.089704] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1235.091783] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:41:34 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:41:34 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x80) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x81) read$ptp(r1, 0x0, 0x0) clone3(&(0x7f00000003c0)={0x100000100, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, {0x37}, &(0x7f0000000180)=""/53, 0x35, &(0x7f00000001c0)=""/218, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x9, {r0}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) clone3(&(0x7f0000001c80)={0x20000, &(0x7f0000000980), &(0x7f0000000a00)=0x0, &(0x7f0000000ac0), {0x37}, &(0x7f0000000c80)=""/4096, 0x1000, &(0x7f0000000b00)=""/55, &(0x7f0000000b40)=[r4], 0x1, {r1}}, 0x58) clone3(&(0x7f0000000c00)={0x20810800, &(0x7f00000005c0), &(0x7f0000001d00), &(0x7f0000000580), {0x20}, &(0x7f0000000a40)=""/53, 0x35, &(0x7f0000000a80)=""/7, &(0x7f0000001d40)=[r6, r4, r6, r4], 0x4, {r5}}, 0x58) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000840)=0x0) r8 = creat(&(0x7f00000008c0)='./file0\x00', 0x2) clone3(&(0x7f0000000900)={0x200a04300, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x2c}, &(0x7f0000000700)=""/105, 0x69, &(0x7f0000000780)=""/133, &(0x7f0000000880)=[r3, r7], 0x2, {r8}}, 0x58) syz_mount_image$msdos(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0xac, 0x1, &(0x7f0000000540)=[{&(0x7f00000004c0)="c522769f29a3ae16ff23c15e5200269a18001fab8142482987eabf9b9f8e2c0d366cd0f00531b85109388d2c24ab54c710733657e59769c5449a8c9e094d39bb4d3a17aa8482438736b4", 0x4a, 0x6}], 0x3004065, &(0x7f0000000b80)={[{@fat=@check_normal}, {@nodots}, {@dots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@dots}, {@nodots}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x24, 0x1, 0x9, 0x7, 0x0, 0x4, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x10000, 0x3}, 0x4100, 0x18000000000, 0xfffffffe, 0x4, 0x2, 0xabdb, 0x1, 0x0, 0xfffffff7, 0x0, 0x8}, r3, 0xffffffffffffffff, r5, 0x1) pipe2(&(0x7f0000000600), 0x4000) 07:41:34 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}, @random="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"}, 0x7c1) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7ffe}, @device_b, @from_mac, @device_b, {0x9, 0x4}}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:41:34 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r0, &(0x7f0000000040)=""/190, 0xbe) 07:41:34 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6000}}}}}}, 0x0) 07:41:34 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/121) shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:41:34 executing program 5: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x5000) r0 = shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x4000) shmdt(r0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:41:34 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x3, 0x80, 0xc9, 0xf7, 0x2, 0x40, 0x0, 0xffffffffffffffe1, 0x46010, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1aeeaf14, 0x100000001}, 0x3000, 0x8, 0x10000000, 0x0, 0xcbe7, 0x7, 0x3590, 0x0, 0x7a31, 0x0, 0x7}) r2 = memfd_secret(0x80000) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x2, 0x3}, 0x6) 07:41:34 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/121) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) [ 1245.311692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.330492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:41:34 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x1, 0x5, 0x0) [ 1245.337437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1246.124424] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:41:45 executing program 6: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r0, &(0x7f0000000040)=""/190, 0xbe) 07:41:45 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/121) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:41:45 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x1080, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = gettid() ioprio_get$pid(0x2, r1) r2 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x8, 0x0, 0x1, 0x6, 0x0, 0x7, 0xc8002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fffffff, 0x1, @perf_config_ext={0x4, 0xc74}, 0x4030c, 0x100000000, 0x8001, 0x8, 0x8, 0xfffffffd, 0x4f8, 0x0, 0x0, 0x0, 0xffffffff00000000}, r1, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x7f, 0xfc, 0x3, 0x0, 0x0, 0xb9, 0x84020, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0xfff, 0x9}, 0x80, 0x235d, 0x0, 0x7, 0x7fff, 0x8, 0x5, 0x0, 0x0, 0x0, 0x7366}, r1, 0x7, r2, 0xd) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) 07:41:45 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7ffe}, @device_b, @from_mac, @device_b, {0x9, 0x4}}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:41:45 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:41:45 executing program 5: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x1000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/33) shmctl$IPC_RMID(r0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:41:45 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x810, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x1, 0xbf, 0x0, 0x0, 0x7, 0x2000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0xc001, 0x5, 0x200, 0x0, 0x42, 0x1, 0x1, 0x0, 0x8}, 0xffffffffffffffff, 0xc, r0, 0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x9, 0x6, 0x0, 0x3, 0x0, 0x10003, 0x20016, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x20, 0x2, @perf_config_ext={0x3d, 0x7}, 0x41100, 0x7, 0x6, 0x5, 0x7, 0x68022ddf, 0x4, 0x0, 0x3, 0x0, 0x3}, r1, 0xd, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x81, 0x1, 0x6, 0x80, 0x0, 0x401, 0x1008, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_config_ext={0x1, 0x2c9f}, 0x3001, 0xfffffffffffffff8, 0x8, 0x2, 0x80, 0x1, 0x800, 0x0, 0x7, 0x0, 0x2f75}, r1, 0x6, r2, 0xa) r4 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) r5 = gettid() ioprio_get$pid(0x2, r5) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0xfb, 0x3, 0x9, 0x0, 0x0, 0xbb, 0x42008, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x10001, 0x20}, 0x10400, 0x1, 0x4, 0x0, 0x1, 0x8001, 0x100, 0x0, 0x709, 0x0, 0x8}, r5, 0x5, r4, 0x1) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x1c) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r3, &(0x7f00000002c0)={r4, r4, 0x40}) ioctl$TIOCCONS(r6, 0x541d) read$ptp(r4, 0x0, 0x0) 07:41:45 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf000}}}}}}, 0x0) [ 1256.047939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1256.066485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1256.079385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:41:45 executing program 6: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r0, &(0x7f0000000040)=""/190, 0xbe) 07:41:45 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:41:45 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/121) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:41:45 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000) 07:41:45 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffff}}}}}}, 0x0) 07:41:45 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x201, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r0, 0x0, 0x0) 07:41:45 executing program 6: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r0, &(0x7f0000000040)=""/190, 0xbe) 07:41:45 executing program 5: r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) shmdt(r0) 07:41:45 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:41:45 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x16, 0x28, 0x800, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @empty, @rand_addr=0x64010100, @broadcast, @multicast2}}}}, &(0x7f0000000080)={0x1, 0x4, [0x94b, 0xf88, 0xb1d, 0x867]}) [ 1256.945183] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1256.947893] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:41:55 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r0, &(0x7f0000000040)=""/190, 0xbe) 07:41:55 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) fcntl$getflags(r0, 0x3) 07:41:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:41:55 executing program 2: unlink(&(0x7f0000000000)='./file0\x00') rmdir(&(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x400000, 0x40, 0x4}, 0x18) 07:41:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x28040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000000)) read$ptp(r0, 0x0, 0x0) 07:41:55 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(0x0, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7ffe}, @device_b, @from_mac, @device_b, {0x9, 0x4}}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:41:55 executing program 5: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) r0 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffb000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/125) 07:41:55 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d2, 0x0) 07:41:55 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r0, &(0x7f0000000040)=""/190, 0xbe) [ 1266.105559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1266.120706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1266.132335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:41:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000100)={0x1, 0x7, 0x2, 0x0, 0x3, [{0xec7e828, 0x80000000, 0x101, '\x00', 0x805}, {0x6, 0xfffffffffffffff7, 0x7, '\x00', 0x100}, {0x1ff, 0x1ff, 0x81, '\x00', 0x2000}]}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000200)={0x2, 0x80000001, 0x4, 0x7, 0x3, [{0x1ff, 0x6, 0x4, '\x00', 0x3882}, {0xfff, 0x200, 0x5, '\x00', 0xc}, {0x9, 0x100000000, 0x100000001, '\x00', 0x2401}]}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f00000003c0)={0x6, 0x5, 0x1, 0x3f, 0x6, [{0x5, 0xe57c, 0x3ff, '\x00', 0x182}, {0x0, 0x0, 0x1f, '\x00', 0x4}, {0xffffffffffffffbe, 0x7, 0x5, '\x00', 0x200}, {0x1, 0x1, 0x80, '\x00', 0x402}, {0x3, 0x8000, 0x8, '\x00', 0x601}, {0x9, 0x3, 0x401, '\x00', 0x4}]}) r3 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r3, 0x0, 0x0) 07:41:55 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/64, 0x40, 0x4020, 0x0, 0x0) 07:41:55 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d2, 0x0) 07:41:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:41:55 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r0, &(0x7f0000000040)=""/190, 0xbe) 07:41:55 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d2, 0x0) 07:41:55 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r0, &(0x7f0000000040)=""/190, 0xbe) 07:41:55 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@random="63c07bc5534d", @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1266.961633] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1267.068766] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1267.071298] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1267.073788] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1267.079598] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1267.085798] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:42:06 executing program 2: syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @dev, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, r0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}}}}}}, 0x0) syz_emit_ethernet(0x158, &(0x7f0000000080)={@remote, @empty, @val={@val={0x9100, 0x4, 0x1, 0x1}, {0x8100, 0x4}}, {@mpls_uc={0x8847, {[{0xd8, 0x0, 0x1}, {0x665c4, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x3fe, 0x0, 0x1}], @ipv4=@igmp={{0x1b, 0x4, 0x3, 0x4, 0x132, 0x64, 0x0, 0x2, 0x2, 0x0, @local, @multicast2, {[@noop, @timestamp_prespec={0x44, 0x2c, 0xdf, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@remote, 0xb35e}, {@multicast1, 0x32}, {@loopback, 0x7}, {@rand_addr=0x64010100, 0x7ba}]}, @noop, @end, @rr={0x7, 0x13, 0xac, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x3b}]}, @noop, @timestamp_prespec={0x44, 0x14, 0xfa, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffc}, {@empty, 0x1}]}, @end]}}, {0x15, 0x80, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "843b52750efd4a1afeabf85e2c6bafcac48be214907d01db2bec87d44aa52853b4efa7c9084a96462364aaf3b413d4152023f01228e40d633e04a8eb2ee853a4f061388b2ab60be3eaf8349399f4d86ac073c63729afad0d1c86bbafdbaa2f3062e5575f4af94bce83d760afe05d95dd1b921790498d1f5808939363d23e653178ecb982684fa714fdb689523c6e67aae4b4f8677ede6eb62fb20da2e8543add8048894656c5baf316e9548a6c90b4b47e425ffecd36ea765ffa8603a2eb"}}}}}}, 0x0) 07:42:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) read(r0, &(0x7f0000000040)=""/190, 0xbe) 07:42:06 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:42:06 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x34}, 0x1, 0x0, 0x0, 0x845}, 0x40081) read$ptp(r0, 0x0, 0x0) 07:42:06 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/locks\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40001, 0x1c0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f0000000080)={'L-', 0x1}, 0x16, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 07:42:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:42:06 executing program 5: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x3) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) r0 = pkey_alloc(0x0, 0x0) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f000086f000/0x4000)=nil, 0x4000, 0x200000c, r1) pkey_mprotect(&(0x7f0000871000/0x4000)=nil, 0x4000, 0x0, r0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, r0) madvise(&(0x7f0000871000/0x3000)=nil, 0x3000, 0x0) 07:42:06 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(0x0, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7ffe}, @device_b, @from_mac, @device_b, {0x9, 0x4}}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="30b619d48548867a081ec2ed880c686b2fee530b54b69bc894c2394f0b48567943e619bb3753ab149ea31a7c88bdc5011c3e76a849281416b8bb1d54f5894cb18fc1788b7b90277785a836d546ce9a05981dd6c7a4ee578da4765ae7219b1b2e602726a1976b403d7feb57e3c72118af5b7cadb0deaf6a069373cebb5e4c113aa8aaf3cf9bf16683d661f9f081b5f338566c1b011c47bdee03e1ce5dbac9391ea06cc2326a5c2bf1f125ccc2eb922a8b6b33da62f47a4f6883d89b7b586602391ce17b9d567a23012e912085ba11278722dd4ec2c716ae5cd88317b718dde7a9892542c43986cdc489ad8814c4a922ee0dd1cec042398b3c5b587e6c6d9c748253594cbbaa26861ee41de2bcc48ca2247e006deffc8fda87ee1a381df52e267f1367e871c6098182fd0780c75a471fd6b139d729b0eab8538e6c3619a4ae23513e9d17719f2ce7cfcce7abff61aac656c68cdef06928e62e7baf45fdf492cb8419a4ff239b70e352f2e5b09b4bbd521d6d586fc8bff2e46e66a77377d309489e4f4b791622fbb704ff6a18ffdfcd9166086a54a9eaee49c74d9713f3843142ef314b665571b3a8400ca93139d0d6cb839a1b0b46efa13f5dac91e014fb5727862e5284b61dcf73217ee2ed5c8d32765ae2a23e90fb6cf778be6ebe561a583b9bb6932d61143baf2f1864dc2350bdfe61587599de3d4a2bb6c501d3e4cc2017b106499e10dee2515bcc540d7665b15972925f10f27067dd599e847fddd257609db34d23857946b92cf29a4b8dbfd16c301663de9adb6ed8405a8685ad3e847cea97328f40efb8788de95cb71adcabe40631e9e82d30d048ec586bc4af2348d8f70ddf606339f0a3ef4d3e9ccd0a5dfdfb726daf53da373877142b35bce3a13695048614a61b6a0782128123fb35990b64dcc5f4c33f361270c01cbf0e892c7f212881f6d03a1165cf70846c59c21e36db0d08120a43c8414db6669053d4ec052baac1bca2b130dfbf490475a73514068202db02636588d607954d9e4ba99e6d1f05d672d98261f0cddab85e3f0b0d909108d29549a9d22ab310e6c296ec89db9ecd1aa7033b683c1cdb92c4be76f6ac82e4e0ab938b2e"}, 0x354) 07:42:06 executing program 5: r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r1 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) r2 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r2) r3 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r3) r4 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmdt(r4) shmdt(r4) shmdt(r0) shmdt(r1) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:42:06 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r2, 0x1, 0x0, 0x0, {0x32}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x8811}, 0x4000000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r3, 0x0, 0x0) [ 1277.238366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:42:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x2200, 0x0) read(r0, &(0x7f0000000040)=""/190, 0xbe) [ 1277.254254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1277.266358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:42:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x5ba2, &(0x7f0000000540)={0x0, 0x75e8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) sendmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000040)={0xffffffe1, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, r2, r3]}, 0x3) clock_gettime(0x0, &(0x7f0000005640)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f0000005400)=[{{&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)=""/240, 0xf0}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x2, &(0x7f00000002c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000300), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000380)=""/36, 0x24}, {&(0x7f00000003c0)=""/46, 0x2e}, {&(0x7f0000000400)=""/100, 0x64}], 0x3, &(0x7f0000001700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f00000017c0)=""/225, 0xe1}], 0x1, &(0x7f00000018c0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}, {{&(0x7f0000001a40), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001ac0)=""/207, 0xcf}, {&(0x7f0000001bc0)=""/137, 0x89}], 0x2}}, {{&(0x7f0000001cc0), 0x6e, &(0x7f0000001f00)=[{&(0x7f0000001d40)=""/178, 0xb2}, {&(0x7f0000001e00)=""/89, 0x59}, {&(0x7f0000001e80)=""/127, 0x7f}], 0x3, &(0x7f0000001f40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x138}}, {{&(0x7f0000002080)=@abs, 0x6e, &(0x7f0000003380)=[{&(0x7f0000002100)=""/86, 0x56}, {&(0x7f0000002180)=""/218, 0xda}, {&(0x7f0000002280)=""/30, 0x1e}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/181, 0xb5}], 0x5, &(0x7f0000003400)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f00000034c0), 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003540)=""/120, 0x78}, {&(0x7f00000035c0)=""/203, 0xcb}, {&(0x7f00000036c0)=""/190, 0xbe}, {&(0x7f0000003780)=""/168, 0xa8}, {&(0x7f0000003840)=""/190, 0xbe}, {&(0x7f0000003900)=""/213, 0xd5}], 0x6, &(0x7f0000003a80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003b00), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003b80)=""/112, 0x70}, {&(0x7f0000003c00)=""/164, 0xa4}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/126, 0x7e}, {&(0x7f0000004d40)=""/143, 0x8f}, {&(0x7f0000004e00)=""/87, 0x57}, {&(0x7f0000004e80)=""/95, 0x5f}, {&(0x7f0000004f00)=""/106, 0x6a}, {&(0x7f0000004f80)=""/87, 0x57}, {&(0x7f0000005000)=""/146, 0x92}], 0xa}}, {{0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000005180)=""/155, 0x9b}, {&(0x7f0000005240)=""/208, 0xd0}, {&(0x7f0000005340)=""/26, 0x1a}], 0x3, &(0x7f00000053c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}], 0x9, 0x140, &(0x7f0000005680)={r4, r5+10000000}) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 07:42:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:42:06 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:42:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x2200, 0x0) read(r0, &(0x7f0000000040)=""/190, 0xbe) 07:42:06 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) fcntl$setpipe(r1, 0x407, 0xe7b8) 07:42:06 executing program 0: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:42:06 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x80) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x81) read$ptp(r1, 0x0, 0x0) clone3(&(0x7f00000003c0)={0x100000100, &(0x7f0000000080), &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, {0x37}, &(0x7f0000000180)=""/53, 0x35, &(0x7f00000001c0)=""/218, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x9, {r0}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) clone3(&(0x7f0000001c80)={0x20000, &(0x7f0000000980), &(0x7f0000000a00)=0x0, &(0x7f0000000ac0), {0x37}, &(0x7f0000000c80)=""/4096, 0x1000, &(0x7f0000000b00)=""/55, &(0x7f0000000b40)=[r4], 0x1, {r1}}, 0x58) clone3(&(0x7f0000000c00)={0x20810800, &(0x7f00000005c0), &(0x7f0000001d00), &(0x7f0000000580), {0x20}, &(0x7f0000000a40)=""/53, 0x35, &(0x7f0000000a80)=""/7, &(0x7f0000001d40)=[r6, r4, r6, r4], 0x4, {r5}}, 0x58) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000840)=0x0) r8 = creat(&(0x7f00000008c0)='./file0\x00', 0x2) clone3(&(0x7f0000000900)={0x200a04300, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x2c}, &(0x7f0000000700)=""/105, 0x69, &(0x7f0000000780)=""/133, &(0x7f0000000880)=[r3, r7], 0x2, {r8}}, 0x58) syz_mount_image$msdos(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0xac, 0x1, &(0x7f0000000540)=[{&(0x7f00000004c0)="c522769f29a3ae16ff23c15e5200269a18001fab8142482987eabf9b9f8e2c0d366cd0f00531b85109388d2c24ab54c710733657e59769c5449a8c9e094d39bb4d3a17aa8482438736b4", 0x4a, 0x6}], 0x3004065, &(0x7f0000000b80)={[{@fat=@check_normal}, {@nodots}, {@dots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@dots}, {@nodots}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x24, 0x1, 0x9, 0x7, 0x0, 0x4, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x10000, 0x3}, 0x4100, 0x18000000000, 0xfffffffe, 0x4, 0x2, 0xabdb, 0x1, 0x0, 0xfffffff7, 0x0, 0x8}, r3, 0xffffffffffffffff, r5, 0x1) pipe2(&(0x7f0000000600), 0x4000) 07:42:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x2200, 0x0) read(r0, &(0x7f0000000040)=""/190, 0xbe) 07:42:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) [ 1278.039837] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1278.279994] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1278.281406] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1278.284455] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1278.285830] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1278.290326] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:42:07 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x401c5820, 0x0) 07:42:07 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, &(0x7f0000000040)=""/190, 0xbe) 07:42:07 executing program 0: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:42:07 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:42:07 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(0x0, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7ffe}, @device_b, @from_mac, @device_b, {0x9, 0x4}}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:42:07 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x77, 0x4, 0xf9, 0x2, 0x0, 0x80000001, 0x4008, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x2, 0x40, 0x6, 0x2, 0x6, 0xcdea, 0x2, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xd, r0, 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) [ 1278.422126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1278.501708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1279.251202] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1281.016793] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1281.019012] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1281.020947] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1281.024636] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1281.029353] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1283.109340] Bluetooth: hci7: command tx timeout [ 1285.157200] Bluetooth: hci7: command tx timeout [ 1287.205139] Bluetooth: hci7: command tx timeout [ 1289.253140] Bluetooth: hci7: command tx timeout [ 1296.956846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.957976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.995443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1296.996555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1297.297973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1297.301813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1297.305528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:42:37 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, 0x0, 0x0) 07:42:37 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x2, 0x4080) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x5) r1 = gettid() ioprio_get$pid(0x2, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x40002, 0x0) write$cgroup_pid(r2, &(0x7f0000000140)=r1, 0x12) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10000, 0x1c2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0xf9, 0x7b, 0x3e, 0x0, 0x0, 0x0, 0xd, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x9, 0x4}, 0x2, 0x7, 0x7f, 0x131c1ab20f2c5b96, 0x0, 0x8001, 0x4, 0x0, 0x2, 0x0, 0x9}, r1, 0xa, r3, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) 07:42:37 executing program 2: r0 = socket(0x1a, 0x1, 0x5) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x8000, 0x6}) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448c9, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0xffffffffffffffff, 0x7, "5d18c3", 0x1, 0x5}) r6 = creat(&(0x7f0000000280)='./file0\x00', 0x80) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448c9, 0x0) r8 = fsmount(0xffffffffffffffff, 0x1, 0x1) dup2(0xffffffffffffffff, r4) r9 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x3) write$binfmt_script(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f66756c6c00202e23235d20aaaaaaaaaa0ad1c1a0517b84657845222e21a11d2ff9354a68158b20e7e5679299e0a3b2f4eca74a95ec7b86d0fb2f644a3aff9f4173e262e1f2332eaeee92723f4a5c3b5bdcac3811b9b495d8a279ba2a8227a842ea6da3d2285724686fe81017840350c0b511c4ba44d59fc1d295a181dfb7c9f3dd5003698e4a"], 0x8e) r10 = eventfd2(0x101, 0x0) poll(&(0x7f00000002c0)=[{r2, 0x4a0}, {r3, 0xb050}, {r7, 0x4408}, {r7}, {r1, 0x405}, {r0, 0x2}, {r8, 0x208}, {r5, 0x111}, {r10, 0x1460}, {r6, 0x2085}], 0xa, 0x2) 07:42:37 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/locks\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40001, 0x1c0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f0000000080)={'L-', 0x1}, 0x16, 0x3) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 07:42:37 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000180)={"1541dcb7c2c29cc7ddda88904cb2f9d6", 0x0, 0x0, {0x200, 0x3}, {0x2, 0xffff}, 0x800000000, [0x4, 0xfffffffffffffff4, 0xc38, 0x7ff, 0xfffffffffffffff7, 0xdf0, 0x23, 0x401, 0xf4, 0x9, 0x4, 0xffffffff, 0x7, 0x0, 0xf1fd, 0x2]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000280)={"f65f3bde523eee20f9eceb204f25f4f4", r2, 0x0, {0xcafb, 0x8000}, {0x1ff, 0x3}, 0x7f, [0x5, 0x100000000, 0x3, 0x2, 0xd5c, 0x4, 0xffffffffffffff7f, 0x100, 0xffff, 0x8a25, 0x1, 0x0, 0x3e, 0x80, 0x1, 0x1]}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448c9, 0x0) sendfile(r3, r5, &(0x7f0000000080)=0x5, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x4, 0x0, "9ca2bb", 0x8}) read$ptp(r1, 0x0, 0x0) 07:42:37 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:42:37 executing program 0: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:42:37 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/190, 0xbe) [ 1308.172143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1308.183659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1308.193550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:42:37 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:42:37 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/190, 0xbe) 07:42:37 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:42:37 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/190, 0xbe) 07:42:37 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:42:37 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:42:37 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, 0x0, 0x0) 07:42:37 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:42:37 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) [ 1308.948892] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1308.964533] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1308.966004] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1308.968430] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1309.031176] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1309.032859] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1309.036841] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1309.041806] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1309.046838] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1309.049478] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1309.057029] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:42:46 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x1, 0x4, "8b27cf", 0x9}) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x1, 0x2}, 0x6) 07:42:46 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:42:46 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, 0x0, 0x0) 07:42:46 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e6, 0x0) 07:42:46 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x42100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) read$ptp(r0, 0x0, 0x0) 07:42:46 executing program 2: ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000000)) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac2814aaffffffff00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800002a58c869244e22e069b746bc448ce1583f86998afe16fb81d967a0a26286aa56b50b6c4c0aacca4402f01523273c2cd3e6ac3b6e3b9873b0de14a6959e71cf8cb3945282a69ba2ecec3698a504968babeab7dcb3eb069bcbdf9f75e8a24a9d5aebc41be8533be08ab3391006942ed595cdf294b5931a673f581b42f94ea5edc55aea2626"], 0x0) 07:42:46 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:42:46 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, 0x0, 0x0) 07:42:46 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) [ 1316.995770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1317.005197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1317.010344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:42:46 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) [ 1317.799250] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1317.799429] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1317.801919] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1319.013172] Bluetooth: hci1: command 0x0401 tx timeout 07:42:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, 0x0, 0x0) 07:42:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r0, 0x0, 0x0) 07:42:57 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac2814aaffffffff00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="4d00000090780000"], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 07:42:57 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, 0x0, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:42:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, 0x0, 0x0) 07:42:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:42:57 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, 0x0, 0x0) 07:42:57 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x6, 0x80, 0x6, 0x0, 0x5, 0x40000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x8, 0xdc}, 0x90, 0x1ff, 0xf3, 0x81b5ab048438285a, 0x80000001, 0x7, 0xfff, 0x0, 0x401, 0x0, 0x100}, 0x0, 0xe, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 07:42:57 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) 07:42:57 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, 0x0, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:42:57 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x17}, 0x0, 0x0, 0x4000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xf, r0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r1, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x614901, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000010000001c000000", @ANYRES32=r2, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 07:42:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) [ 1328.369742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1328.393725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:42:57 executing program 6: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) [ 1328.411778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:42:57 executing program 2: fcntl$getown(0xffffffffffffffff, 0x9) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000040)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@can={0xc, {{0x1, 0x0, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "e6cf178440cdaa52"}}}}, &(0x7f0000000080)={0x0, 0x57e0b17, [0x2af, 0x3c3, 0x984, 0x3e8]}) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@x25={0x805, {0x0, 0xe1, 0x935252602346188b, "ed716550afad3474636ea9bea8b0bd9b379328016a5515f1044cd50b0d79287328f12c0076a0bd653d"}}}}, 0x0) 07:42:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) 07:42:57 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, 0x0, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:42:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:42:57 executing program 2: syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448c9, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000080)=""/68, 0x44, 0x0, &(0x7f0000000280)=@l2tp={0x2, 0x0, @remote, 0x3}, 0x80) r0 = accept(0xffffffffffffffff, &(0x7f0000000300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000380)=0x80) recvfrom(r0, &(0x7f00000003c0)=""/4096, 0x1000, 0x7b019ccb5bb641d1, &(0x7f00000013c0)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80) syz_emit_ethernet(0x10d, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @val={@val={0x9100, 0x4, 0x1, 0x4}, {0x8100, 0x6, 0x1}}, {@mpls_mc={0x8848, {[{0xff9db, 0x0, 0x1}, {0x3c000}, {0x400, 0x0, 0x1}, {0xdb}, {0x4, 0x0, 0x1}, {0x8}, {0x100}], @ipv6=@generic={0xc, 0x6, "cf784b", 0xb3, 0x32, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, @dev={0xfe, 0x80, '\x00', 0x3d}, {[@srh={0x6, 0x6, 0x4, 0x3, 0x8, 0x20, 0x5, [@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @ipv4={'\x00', '\xff\xff', @empty}, @private2]}, @hopopts={0x3c, 0x8, '\x00', [@calipso={0x7, 0x40, {0x1, 0xe, 0x0, 0xff, [0x7ff, 0x2, 0x0, 0xffffffff, 0x8, 0x6, 0x80000001]}}, @ra]}], "1746386832a5281d1b86fa8dbee1f3e0e9f1a3992ac73941213cd344831018e74c0e0e76cb0962a1b8873c"}}}}}}, &(0x7f0000000000)={0x0, 0x1, [0x554, 0x80a, 0x24a, 0x2ca]}) 07:42:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) 07:42:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:42:57 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040), 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:42:57 executing program 2: rt_sigqueueinfo(0x0, 0x2a, &(0x7f0000000000)={0x16, 0x4d4, 0x1}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x40, 0x8, 0x3f, 0x7f, 0x0, 0x200, 0x21000, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x401, 0xbf86}, 0x2, 0x2, 0x1, 0x2, 0x1, 0xb4f, 0x7f, 0x0, 0x1, 0x0, 0x9}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x3) r0 = gettid() r1 = gettid() ioprio_get$pid(0x2, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x6, 0x4, 0x1, 0xc3, 0x0, 0x86e, 0x20, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x93c, 0x4, @perf_bp={&(0x7f0000000180), 0x1}, 0x232, 0x3, 0x1, 0x4, 0x5a455408, 0x11, 0x400, 0x0, 0x7, 0x0, 0xffffffff7fffffff}, r1, 0xc, r2, 0x0) ioprio_get$pid(0x2, r0) rt_sigqueueinfo(r0, 0x18, &(0x7f0000000080)={0x1, 0x1, 0x10000}) [ 1329.141491] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1329.342527] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1329.345317] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1329.350606] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:43:06 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7ffe}, @device_b, @from_mac, @device_b, {0x9, 0x4}}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:43:06 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 07:43:06 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040), 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:43:06 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d2, 0x0) 07:43:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) 07:43:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) 07:43:06 executing program 1: ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r0, 0x0, 0x0) 07:43:06 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x440002, 0xc1, 0x1}, 0x18) bind(r1, &(0x7f0000000080)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) 07:43:06 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d2, 0x0) 07:43:06 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x2a, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x882441, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x8, 0x7, 0x1f, 0x1f, 0x0, 0x2, 0x2000, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000000), 0xd}, 0x2081, 0xffff, 0x5, 0x4, 0x4, 0x2, 0x0, 0x0, 0x1, 0x0, 0xfe6}, 0xffffffffffffffff, 0xd, r0, 0x8) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r1, 0x0, 0x0) 07:43:06 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d2, 0x0) [ 1337.452019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1337.461331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1337.469757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:43:06 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040), 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:43:06 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) r2 = openat2(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x2, 0x16}, 0x18) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7, 0x0, 0x6, 0x6, 0x0, 0x1, 0x5410, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3, @perf_bp={&(0x7f0000000000), 0x2}, 0xa0, 0x2, 0x6, 0xc, 0x6, 0x9, 0x0, 0x0, 0x80000001, 0x0, 0x7}, r1, 0xc, r2, 0xa) 07:43:06 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448dd, 0x0) 07:43:06 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:43:06 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x5, 0xff, 0x3, 0x0, 0x4, 0x8000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x55000, 0x81, 0x7f, 0x5, 0x81, 0x1, 0x6, 0x0, 0x40}, 0x0, 0x9, r2, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x5, 0x0, 0x1, 0x3a, 0x0, 0x2, 0x20, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x7, 0x7}, 0x102f8, 0x2, 0x5, 0x8, 0x1, 0x1, 0x9cb, 0x0, 0x9, 0x0, 0x8}, 0xffffffffffffffff, 0x7, r1, 0x0) read$ptp(r1, 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000300)=0x0) r5 = pidfd_getfd(r2, r2, 0x0) perf_event_open(&(0x7f0000000280)={0x506a7b9b937489bc, 0x80, 0xfa, 0x6, 0x1, 0x80, 0x0, 0x8, 0x28108, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240), 0x9}, 0x80, 0x7, 0x29, 0x1, 0x2, 0x1, 0xffff, 0x0, 0xe3f, 0x0, 0x35ff98f8}, r4, 0xd, r5, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x0, 0x80, 0x22, 0x9, 0x0, 0x3f, 0x0, 0x7, 0x4000, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xf73d, 0x1, @perf_bp={&(0x7f0000000180), 0x2}, 0x592, 0x0, 0xfffffffe, 0x3, 0xbf3, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x192c000}) [ 1338.243371] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:43:16 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7ffe}, @device_b, @from_mac, @device_b, {0x9, 0x4}}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:43:16 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:43:16 executing program 2: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000040)={0x8c, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000b00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b80)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'batadv0\x00', 0x0}) recvmsg(r1, 0x0, 0x40000000) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000003980)={0x124, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000014}, 0x5) r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0xffffffffffffff27, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x2a00, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000800)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000000a80)={&(0x7f0000000380), 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x1b4, r7, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r9 = accept4(0xffffffffffffffff, &(0x7f0000000b00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b80)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000010c0)={'batadv0\x00', 0x0}) recvmsg(r9, 0x0, 0x40000000) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000003980)={0x124, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000014}, 0x5) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x120, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x9183815ed9c98083}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 07:43:16 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448dd, 0x0) 07:43:16 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x51, 0x8, 0x7f, 0x3f, 0x0, 0x6, 0x108, 0xd, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x6, @perf_bp={&(0x7f0000000000), 0xa}, 0x828, 0x3f, 0x0, 0x0, 0x7, 0x9, 0x3f, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xe, r0, 0x1) 07:43:16 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(0x0, r5, 0xee01) fchown(0xffffffffffffffff, r3, r5) 07:43:16 executing program 4: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x6, 0x80, 0x6, 0x0, 0x5, 0x40000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x80000001, 0x2, @perf_config_ext={0x8, 0xdc}, 0x90, 0x1ff, 0xf3, 0x81b5ab048438285a, 0x80000001, 0x7, 0xfff, 0x0, 0x401, 0x0, 0x100}, 0x0, 0xe, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 07:43:16 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) 07:43:16 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448dd, 0x0) [ 1347.253482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1347.266507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1347.273636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:43:16 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) 07:43:16 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000000)=0x1000, 0x2, 0x1) 07:43:16 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) 07:43:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x80108906, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80108906, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) r2 = inotify_init() ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) 07:43:16 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x8, 0x4) 07:43:16 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x2, 0x1) 07:43:16 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) [ 1348.041528] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1348.084967] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:43:25 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x1) 07:43:25 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="df96653144731574963b156c19b159b0aa70ba799660ea7bde", 0x43}, {&(0x7f0000000040)="96c660862fc8f3e42c42c8be900e22d2480e1b3be03a7298fd1af9226018475f0a28df9e186600806dd9d29cebe68828c13524d60ec8e59ffe2954ed8b5fb6c5b6e6eeb18edfcb554eeb32cf5caca6792ad8fca8194e85539428777feefde4680c9315bcd02cd51fab8eea302dbb3631198cb967d73be1c277d6990405f580bb516aec1ec6ee51449e2232c144a62f731f20a5e13881dfc9b8278cf6c3cdd7b562a867d19808db27489273b6dcd08052ea27e4f5f6bb400fac8db7f4b93501da487893", 0xc3}, {&(0x7f0000000140)="0a08faf0cd8242687316afe6f08b37771b1fa1c31b90d2121bdef6513b19046e6859dcbabe0948dc16b4ac8f269f03e2ea5e372a050de3bfef36b93ab148896a45625dd754350229d2ee8dead15980ab2bb6a7cd1c8ce651ab24603f440b8ee225dddc3af9e4dc8c4e1d5dbe2929b50d", 0x70}, {&(0x7f00000001c0)="470d1a8c464da94ae62ae62094aaeb6f7e2320eb08f3c92d5c7a6dbbb2bc417f02a8ea423a1f5fc02b30648242b58e84b2b1e7dcfecb6f9b2d968ecb8b4943ea3bcb858ab8ed60308661c3c8d6db36cfc13a1b8cb643a61d858fa3c707e6c8cfba2950cce95963bca6f82177ed9311fe4631eade03820d348e64680ca5cf611994d872ac07e982e870e9e305f7afd2c5e36fa0b9d6897e3eca89f9af34309240506e69172c0bce7c895138f7eb606ad866398190e1b6865750ee532ac4ef49e0d7ef7f8af0d242bcb5c64256a7517ab08fb156a8aee6fce4a43008918cd42e2ea975e87857e249a3bf10c16b85", 0xed}], 0x4, 0xa) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 07:43:25 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, 0x0) 07:43:25 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaa01aa00d4590890e858a9b5aaffffffff0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) syz_emit_ethernet(0x14e, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x0, 0x1, [0x400, 0xb98, 0xe49, 0x2b7]}) 07:43:25 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) 07:43:25 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) 07:43:25 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7ffe}, @device_b, @from_mac, @device_b, {0x9, 0x4}}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:43:25 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:43:25 executing program 2: syz_emit_ethernet(0x2cf, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x19, 0x4, 0x0, 0xc, 0x2c1, 0x68, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1, {[@noop, @timestamp_prespec={0x44, 0x4c, 0x94, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x3}, {@broadcast, 0x200}, {@remote, 0x8}, {@loopback, 0x21}, {@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x30c00000}, {@broadcast, 0x81}, {@empty, 0x8}, {@private=0xa010101, 0x14}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x4d, 0x0, [0x2, 0x1], "ef99f9f9e663f0036ad62a683578084c46e5194f1100a4c097c43314447242c63b28a40902695830f10fb36b594fca42a4ca039468f4bde58f329da564b9d0fd259d6405a2ab872d919d67877f"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x2, 0x9, 0x0], "0cc1e15b7d5eb7355050daf06ec0c1611589b931dc4580a17fe0f794ff0645bdf2224c7ed631f2e2d74cc023ca9d1f9bd297f6a1fe96075949acc994840a0f7cd3"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x3ff, 0x1], "0fed2384350ad24d94b0030c0f743b8cbef37fbae87ba041fdf17d16fddbb8628f7cbe96d8ad971eb438e236121feba8b6da049ca853ba3c6a137e770f0a44c0c5a9b8c167f1cb3bc2f2cc60f4115f47ed3dba6be8fd6a4725e87974c7a2eabaef61618370ebe2217e55962703088768eccd544d817ccebae284f33f968decadd3ab2d89a928024fc4005bbbe5afe2b91ddb0000726863f3f57f2d"}, {0x8, 0x88be, 0x4, {{0x5, 0x1, 0x88, 0x0, 0x1, 0x0, 0x7, 0x9}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x3, {{0x7, 0x2, 0x8, 0x2, 0x1, 0x3, 0x5, 0x1f}, 0x2, {0xffff, 0x920b, 0x2, 0xf, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "eefbc766f2a09e9e2b11a9f5221da3df2b28fbd4e4103db3fcbcc1f26c7f26e103ca57f4a95f665da9182f1bf1425c4806f1eaeb070de78a31b02c9ee486d9a4d25dee583fbbfc93222fbbf7e54a877b27a4430638c74e372f9d9dffa12381b7cdf4080272865f9028d9c1415ef6189c48bee6bface819b8e485107909beaf480c45902edc3d6e2073738c85960138a0f371aea2b88de7d802fd88ef820e4eb2ff535f75c54b43438f2e51ced5e804a26f8e80c3c99877869684b03bfdb96a2553233f966837ae17985861041f7a66ed0c89aadd8a90907596802564741270f1563a"}}}}}}, 0x0) syz_emit_ethernet(0x97, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x9100, 0x1, 0x1, 0x1}, {0x8100, 0x6, 0x1, 0x2}}, {@mpls_uc={0x8847, {[{0x4}, {0xee}, {0xffffa, 0x0, 0x1}, {0xe2, 0x0, 0x1}, {0x7ff}, {0x81}], @generic="3cb309db552524700412333946535b5febca4c6c170db7462439e19b28322931db8f141edad00b3007f59ef0f9767306d43186ba58d0c7f75e81d4f7fc717923b7f58998b1aa40f5d3a6574a096c50c93036f292f503b2f916eebcb8faf6d837c9a2cb4a6572ac5295"}}}}, &(0x7f00000000c0)={0x1, 0x4, [0x14c, 0xc0d, 0x31d, 0xd86]}) 07:43:25 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(0x0, r5, 0xee01) fchown(0xffffffffffffffff, r3, r5) [ 1355.882002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1355.894196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1355.903296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:43:25 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000040)=0x2) r2 = dup(r0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000080)={0x0, @aes256, 0x0, @desc3}) 07:43:25 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, 0x0) 07:43:25 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 07:43:25 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) [ 1356.672252] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1356.760386] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1356.801131] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1356.802861] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:43:36 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x20, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x6}}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x3, 0x100) 07:43:36 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(0x0, r5, 0xee01) fchown(0xffffffffffffffff, r3, r5) 07:43:36 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x800}, 0x0, 0x0, 0x800000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc, 0xad, 0x2, 0x2, 0x0, 0xfffffffffffffffa, 0x5002, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x81, 0x0, @perf_bp, 0x40080, 0x1000, 0x3, 0x1, 0xffff, 0x2, 0xfffe, 0x0, 0x80000008, 0x0, 0x7fffffff}, r1, 0x6, 0xffffffffffffffff, 0x1) read$ptp(r0, 0x0, 0x0) 07:43:36 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) 07:43:36 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, 0x0) 07:43:36 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x7ffe}, @device_b, @from_mac, @device_b, {0x9, 0x4}}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="30b619d48548867a081ec2ed880c686b2fee530b54b69bc894c2394f0b48567943e619bb3753ab149ea31a7c88bdc5011c3e76a849281416b8bb1d54f5894cb18fc1788b7b90277785a836d546ce9a05981dd6c7a4ee578da4765ae7219b1b2e602726a1976b403d7feb57e3c72118af5b7cadb0deaf6a069373cebb5e4c113aa8aaf3cf9bf16683d661f9f081b5f338566c1b011c47bdee03e1ce5dbac9391ea06cc2326a5c2bf1f125ccc2eb922a8b6b33da62f47a4f6883d89b7b586602391ce17b9d567a23012e912085ba11278722dd4ec2c716ae5cd88317b718dde7a9892542c43986cdc489ad8814c4a922ee0dd1cec042398b3c5b587e6c6d9c748253594cbbaa26861ee41de2bcc48ca2247e006deffc8fda87ee1a381df52e267f1367e871c6098182fd0780c75a471fd6b139d729b0eab8538e6c3619a4ae23513e9d17719f2ce7cfcce7abff61aac656c68cdef06928e62e7baf45fdf492cb8419a4ff239b70e352f2e5b09b4bbd521d6d586fc8bff2e46e66a77377d309489e4f4b791622fbb704ff6a18ffdfcd9166086a54a9eaee49c74d9713f3843142ef314b665571b3a8400ca93139d0d6cb839a1b0b46efa13f5dac91e014fb5727862e5284b61dcf73217ee2ed5c8d32765ae2a23e90fb6cf778be6ebe561a583b9bb6932d61143baf2f1864dc2350bdfe61587599de3d4a2bb6c501d3e4cc2017b106499e10dee2515bcc540d7665b15972925f10f27067dd599e847fddd257609db34d23857946b92cf29a4b8dbfd16c301663de9adb6ed8405a8685ad3e847cea97328f40efb8788de95cb71adcabe40631e9e82d30d048ec586bc4af2348d8f70ddf606339f0a3ef4d3e9ccd0a5dfdfb726daf53da373877142b35bce3a13695048614a61b6a0782128123fb35990b64dcc5f4c33f361270c01cbf0e892c7f212881f6d03a1165cf70846c59c21e36db0d08120a43c8414db6669053d4ec052baac1bca2b130dfbf490475a73514068202db02636588d607954d9e4ba99e6d1f05d672d98261f0cddab85e3f0b0d909108d29549a9d22ab310e6c296ec89db9ecd1aa7033b683c1cdb92c4be76f6ac82e4e0ab938b2e"}, 0x354) 07:43:36 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000100)=""/226, 0xe2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xff, 0x3, 0x1, 0x0, 0x0, 0x5, 0x10611, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x9}, 0x4861, 0x100, 0x3, 0x6, 0x2, 0x40, 0x8, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x10, r2, 0x0) 07:43:36 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) [ 1367.568019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1367.574555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1367.579593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:43:36 executing program 2: syz_emit_ethernet(0xc8, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @tipc={{0x26, 0x4, 0x1, 0xf, 0xba, 0x65, 0x0, 0xdf, 0x6, 0x0, @empty, @broadcast, {[@end, @ssrr={0x89, 0x27, 0x40, [@remote, @broadcast, @multicast1, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x12}]}, @timestamp_addr={0x44, 0x1c, 0x73, 0x1, 0x8, [{@rand_addr=0x64010100, 0x4}, {@private=0xa010102, 0x4}, {@multicast1, 0xfc96a47}]}, @generic={0x88, 0xe, "e573a5096c402d6cb32e619f"}, @generic={0x83, 0x12, "e9d1ce1a707754ce653bb0408fd66d89"}, @lsrr={0x83, 0x1f, 0x77, [@empty, @rand_addr=0x64010101, @loopback, @local, @empty, @rand_addr=0x64010102, @loopback]}]}}, @payload_direct={{{{0x22, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x2, 0x9, 0x0, 0x0, 0x2, 0x5, 0x3, 0xffff, 0x20, 0x3, 0x4e24, 0x4e20}, 0x1, 0x3}}, [0x0, 0x0]}}}}}, 0x0) r0 = msgget(0x2, 0x200) syz_emit_ethernet(0x94, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)={0x48a9, 0x1, [0x49b, 0x149, 0x2be, 0xf53]}) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/25) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) [ 1368.401494] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1368.424557] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1368.425868] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:43:47 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x1000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/42, 0x2a, 0x0, &(0x7f0000000080)=""/251, 0xfb}, &(0x7f00000001c0)=0x40) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:43:47 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(0x0, r5, 0xee01) fchown(0xffffffffffffffff, r3, r5) 07:43:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) 07:43:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448cc, 0x0) 07:43:47 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7ffe}, @device_b, @from_mac, @device_b, {0x9, 0x4}}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:43:47 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) 07:43:47 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450004000000000000069078ac2814ab0000001000000000f4717f5188e2fcc54190708b18e963d3bc9df5a90849f206e9536940961be6c9ecf3088ba5564a936eaa1a79d176869f8c452c0bef6d36d3e858b4b6263bea19cb1bfb2ed374d2f835fbf18865c8756604e6cc2faa54590987c954853645de", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 07:43:47 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81}, 0x0, 0x0, 0xffffffffffffffff, 0x68fd83af85cde948) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='+-\x00') r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x7, 0x301002) read$ptp(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x80108906, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f000000b080)={@private0, 0x0}, &(0x7f000000b0c0)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f000000b1c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f000000b180)={&(0x7f000000b100)={0x54, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r5 = signalfd4(r3, &(0x7f0000000080)={[0x8000]}, 0x8, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000140), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001680)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000001740)={'ip6_vti0\x00', &(0x7f00000016c0)={'syztnl1\x00', r4, 0x4, 0x0, 0xd, 0xc8, 0x1d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x80, 0x1, 0x2, 0xdd}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001ac0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a80)={&(0x7f0000001780)={0x2c4, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x1ec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0xb4, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5, 0x1, 0x0, 0x7}, {0x3f, 0x81, 0x9, 0xff}, {0xd28, 0xf7, 0x23, 0x7fffffff}, {0x8001, 0x9, 0x3, 0x6}, {0x2, 0x3, 0x5, 0x100}, {0x7fff, 0x3f, 0x8, 0x100}, {0x4e19, 0x80, 0x9, 0x1}]}}}]}}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x80}, 0x4000) [ 1378.495671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1378.513412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1378.528662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:43:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448cc, 0x0) 07:43:47 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa80000000000800450000280000000000069078ac2814aaffffffff00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@broadcast, @broadcast, @val={@val={0x9100, 0x4, 0x1}, {0x8100, 0x5, 0x1, 0x2}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @private2={0xfc, 0x2, '\x00', 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote}}}}, &(0x7f0000000080)={0x0, 0x4, [0x457, 0x8f4, 0x9d4, 0xb27]}) 07:43:47 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 07:43:47 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x6000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 07:43:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) 07:43:47 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x1000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/42, 0x2a, 0x0, &(0x7f0000000080)=""/251, 0xfb}, &(0x7f00000001c0)=0x40) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:43:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448cc, 0x0) [ 1379.574553] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1379.576262] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:44:01 executing program 6: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) 07:44:01 executing program 2: inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450500280000000000069078ac2814aaff1c74ff0000de00943c654ae19023c4cdc98f49b307ce39175d7e37e7c7f65c2578c25608d3bacabe4749ca685e696544b05292ed3f1002133e8b9e8aeadb9f63f2dc380f6850eff647834d632cad222b5411cc40ba615f044bcc81f7a5f79600cc1b453e59789241c35ec2afb421c9b1bf7d9bfe51d6fc3f3686a7fd3dcf6fdb7378db68", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 07:44:01 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x6000, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 07:44:01 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x804000000000, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f00000003c0)) 07:44:01 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {0x7ffe}, @device_b, @from_mac, @device_b, {0x9, 0x4}}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:44:01 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x1000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/42, 0x2a, 0x0, &(0x7f0000000080)=""/251, 0xfb}, &(0x7f00000001c0)=0x40) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:44:01 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1, 0x5, 0x3, 0x0, 0x0, 0x5, 0x800, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x1, 0x80000000000}, 0x4000, 0x0, 0x401, 0x2, 0x5, 0x5, 0x8, 0x0, 0x7c958214, 0x0, 0x7fff}, r2, 0x2, r0, 0xb) read$ptp(r1, 0x0, 0x0) r3 = dup(r0) getsockname$netlink(r3, &(0x7f0000000140), &(0x7f0000000180)=0xc) r4 = epoll_create(0x8) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f00000001c0)=0x6) dup2(r4, r1) flistxattr(r0, &(0x7f0000000100)=""/17, 0x11) 07:44:01 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, 0x0) [ 1392.550845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1392.567969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1392.578398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:44:01 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 07:44:01 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 07:44:01 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, 0x0) 07:44:01 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xe351) syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007ff000/0x800000)=nil, &(0x7f0000000100)="88eeaa4908033cd545e2fc7cffa9778506bfa8045136d17f833bf0f8831c6a21baf86a892b1ea758e26fd3a1a05bb4732a440f9e03217c2d41d64f70ac88dfd69cd51ea850e23ea6628850142b95ced6ffe263573fe1000b19440f523985618d260bd9ee217fd4a4a3c575fea423f340553c0c80bf70c98dde26886de8533725cda05c09569d184860043ca13d05b7f46e27f4a3f371dacd8deda7b3596a4c7f2fcab4e05b003c3d26f5b6464b946ca836c24366aec097c84f0dc2c797fc82173b799418689390d2ddeff3627e4d46a4cfe4d8e78f", 0xd5, r1}, 0x68) 07:44:01 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) [ 1392.640867] FAULT_INJECTION: forcing a failure. [ 1392.640867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1392.642041] CPU: 1 UID: 0 PID: 13519 Comm: syz-executor.4 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1392.642058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1392.642066] Call Trace: [ 1392.642071] [ 1392.642076] dump_stack_lvl+0xfa/0x120 [ 1392.642094] should_fail_ex+0x4d7/0x5e0 [ 1392.642120] _copy_to_user+0x32/0xd0 [ 1392.642138] simple_read_from_buffer+0xe0/0x180 [ 1392.642159] proc_fail_nth_read+0x189/0x270 [ 1392.642179] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1392.642199] ? security_file_permission+0x22/0x90 [ 1392.642216] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1392.642234] vfs_read+0x1eb/0xbe0 [ 1392.642257] ? __pfx_vfs_read+0x10/0x10 [ 1392.642276] ? lock_release+0xc8/0x290 [ 1392.642293] ? __fget_files+0x20d/0x3b0 [ 1392.642318] ksys_read+0x121/0x240 [ 1392.642335] ? __pfx_ksys_read+0x10/0x10 [ 1392.642358] do_syscall_64+0xbf/0x360 [ 1392.642373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1392.642387] RIP: 0033:0x7f8787c3369c [ 1392.642397] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1392.642409] RSP: 002b:00007f87851f6170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1392.642421] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8787c3369c [ 1392.642430] RDX: 000000000000000f RSI: 00007f87851f61e0 RDI: 0000000000000003 [ 1392.642437] RBP: 00007f87851f61d0 R08: 0000000000000000 R09: 0000000000000000 [ 1392.642445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1392.642452] R13: 00007ffe51f188ff R14: 00007f87851f6300 R15: 0000000000022000 [ 1392.642469] 07:44:01 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x1000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:44:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') pread64(r0, &(0x7f0000000180)=""/222, 0xde, 0x200) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x26, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x4e23, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x46}}}}}}, 0x0) [ 1393.395025] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1404.263788] Bluetooth: hci7: command 0x0406 tx timeout 07:44:13 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448c9, 0x0) 07:44:13 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b, {0x9, 0x4}}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:44:13 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, 0x0) 07:44:13 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() ioprio_get$pid(0x2, r1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xff, 0x0, 0x5d, 0x5, 0x0, 0x80, 0x21008, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3ff, 0x2, @perf_bp={&(0x7f0000000080), 0x2}, 0x6008, 0x4, 0x84b3, 0x1, 0x30e, 0x37, 0x6, 0x0, 0x4, 0x0, 0x100}, r1, 0xb, r0, 0x8) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x2, 0xff, 0x9, 0x3, 0x0, 0x8000, 0x90, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, @perf_config_ext={0x1, 0x6}, 0x49000, 0x0, 0xd9a4, 0x9, 0x101, 0x4, 0x8, 0x0, 0xffffffff, 0x0, 0xdc}, 0xffffffffffffffff, 0x1, r0, 0x8) read$ptp(r2, 0x0, 0x0) 07:44:13 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) 07:44:13 executing program 2: sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x400, 0x70bd25, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x42) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 07:44:13 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) 07:44:13 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x1000) openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) [ 1404.618226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1404.626950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1404.642758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:44:13 executing program 2: syz_emit_ethernet(0xae, &(0x7f0000000040)={@local, @dev, @val={@void, {0x8100, 0x2, 0x1, 0x3}}, {@llc_tr={0x11, {@llc={0x4e, 0x42, "5c1f", "15cfc85c9ccb7cb2b2edaa0642c3cc2d918f6ca9b1028742a16b9212bd8111f19d6302eafdcd0b868fbcf8d43ee8e9751af592b52fedf3c62907ba59a5e19e49af722e5d44c5d211ef92f6968c22096e1cbfdf81d860b3551cf869eb2807d55451e0575a6aeb1039f4ce3e26b5bbbe522fe45dee2e9b805b5a316dc8df331eb50fabd2634e09fa27e96b65a525b459f9f813a984a37431ef"}}}}}, 0x0) 07:44:13 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) 07:44:13 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, 0x0) 07:44:13 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0xdb8, [0x81, 0x7], 0xeb83}, 0x10) 07:44:13 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x0, 0x0, 0x0, 0x0) 07:44:13 executing program 1: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(r0, &(0x7f0000005880)=[{{&(0x7f0000000100)=@rc={0x1f, @none, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000180)="948934f0da3dd8483c6b3ed18125dc6203b46966a0c31ac788d91da672f7ed4821a7a9693d03620910f0d995ba3edec9c83c3b", 0x33}, {&(0x7f00000001c0)="35958ff32aa3934e6bae8c0240e4564bc2b804a082ba308e8980608c1dc70dccfbd9d3022ab4ddeb4f8a969672672cfd49ca33f710abf3da51c8488429d2238078ff4f10e046a87b50355ff9cfb4863c4cd2869599becbc913053459b358b3259c9a9af8d4e29c4279b131507f21067d2bfc5114074038fcc024eea198d78e28f98952d5338b48bdd24619f44e25b373b6f94ba132b301ba7c643afa7888f711d9bb9fd5bd72be62a9f1913778a69d", 0xaf}, {&(0x7f00000003c0)="6596158011444030b6ec95b16ef49e934a69669a7d8312b47a90881d504ee1c7280168a7e4c0171f5685dd918ae435b1c86a21232035b020005317210b970393d29fae0bfb5abd0db385e6e789f92f05a48b770d3b960441f031c5c17be6bec557c54a17ff66263ab7bb56469797e08340847dc667dc2b4e93daf6f93df44edcca48b8b588ee2c802272c3dc5e3333d3ad3ea70131347693b0b2ec965b5b22ec5c6105eb27fa9cfe67b034d76a8d0f1d1842348b0741b0757b50b5f0a5a86ed886e13a7396a93e07040008001392dbc6150e6f8d4ef8149d6fd8d2", 0xdb}, {&(0x7f0000000280)="6c513cc21cd7e9e68af65fe74b8d8385be02679dbb0606138ec182d9b2e6325cf0f91aa48bc5cfcd99e708d6c4092ce50c6642778d228ae40748935bca839af7ef1f7ff2ab75c9fff02c8932441be126acee8006e7959603ef4b1df0d949bad4ad5367c5a75925f6789e5e8639c62acda9f853f55de1b17b", 0x78}, {&(0x7f00000004c0)="922dba21ba041ab3eafe34f7ba8fdca908f5028e39ca458a9e9b04e71c99bac4ecac31836fdf1cee7e56feeb433e2f02fd4097bd57bbd6b6e8ee2bad76374e27ccdc01e0c03d43c386d3623f10fe3fd0eb48f04691f1b1e08705993a93a82800a7958b222c4514bd9bfd651a90c210019817c2bda08142", 0x77}], 0x5, &(0x7f00000005c0)=[{0xc0, 0x11, 0x3ff, "f54c1f77bb621d08c5523a1ce9f02f9bd2cacf584497015c86cf1a19c21b3531650ccff68bf1ee862707487fcb3887f8cb8757e15e7a49b7c61f4a09f5ea2c3358ac948041f5b27df4329c460a20d857f78e9720f78fb3bae950126829469578d05a94904c28253865bbcee70ad6d72cd6b8d5a90e8f69756f25f2ac70fb0c449baec04d4f8419857bb8096f0a6c312646516f01f347f3467fc4ff3bf03fa17e3715b820a78610a27734"}, {0x1010, 0x103, 0x1ff, "64f3ea856a84ead30eb365fb0fc6e1cf3b940ef84451ee7095adc3d7045648772a9e05ff60cd60e456ed2d2202af86993a61644145df55ebf89254b70b7d4c8a93661e068b6656476153c569302f0a4d6527eb96de33700f0e2f06506f0bd41c680930c0ee38839a2406055fd9ed7087cc8d63c77f8f9413d026d70d7ba87d6c2c621dd1454f83cb41880b5d621df66ce9d706be34e778cdbcf8dad118e6bd04128967dbbd92a5f16b65da7c4d9988944ab9c1fdded4ea02f87cab2c4b8eabf0b4eb073355b5f0e09be158bcc43cec861c8bff532c3b40ccc590df939de0cd41308f4e7ba835f83cb04d076dfd5d82fa2e88dc83b34b58e118ea390cc20b886d2d69c76dac3ac2c6bbe04a19d8b93e84d345a5653f7afb7d00c8d520ff2a79cccd708bc98820faf765983bfda149e1e7122f8621991a914d9188719d011e9e04ef384da88074e1532c8f50ac73e2333479be13953dd98e2323623386a674f39120c766fb941d035c58ff75984221eb5b220143c46817382a30af2932a5eeaa0b8432a7f48990912d2a92e3778fbe832d0344c103061aedfa32768568ba71da1d264b40a67e91091178b245f949d348da0dd8dca1f7a782d58d3d30aad492318af1d088db16a1ef20345e887b23d6809a76dcf250b220ed78d86668af9d23b6353de2aa4a5d21256cff1e3c7313dfd67fbf25c1eac2b356d093a7dc9f8df5ed35b418d9efebdd91ee59e844cd9d0f34ada593259555b61099f292981fc3e748a7f9426a9711af7508c29c76966e4fae935149289539938d2c1daceaaafe9590d42d92f3855d8a5933cbc89d2abea9a5afa6666ce90cc0f6fb7377be10960158972863437e1928ad9cd6895e424c87432f252fc0ab4d838e98091bd679ef8a9816fa2701a392c9fc8f175dd22ce22b87e46de873edd3df7b89bf7f4aeff5db481693214a4d695c614e4df8dfb698c5bf404411e21ed9efa118407f02b4051df0b1e33d98cada7a41a7dc929d0a984519fe175498086baab4c0460b6c0423a043acfd93ae38a036eb2e00e4c4cacd948fa00d44a0df31d5efe265daef5559d1e3e80827007f7d67a4c1366e242939168a38ee7515b8c4d5df896a05158f5b4800e998adc67b4b4596ab7a4b4e5d5caf6d6533f99697d2517b3a98a12f14763b91df229fc5d0ca31cf3d7a2519e708808fbf5d0a15a6d1b66b721d04d560364616d3196dd41924cf86b2dbbd9197cad5852bdccdc983f815a5ae64aba95e6dc654109fb1f949cc487af431441978c3d072ab4581499abd24168d1788fad34b8030761dba91f362b432a7190f2bbdd12810c2d4a7b78727f77f85b1817e852a8b56e007ab0d763cdc4bf918b61744d5f07913b3260201e212a5715705c543f842519d30bf482299fdd8df532a83fbc2a6ce46f1be97b4538d311da5864c7e3ca8b1b5eb4dea1f703be76894aad33829a2abf1c1e4c9f826003d31ff6619f9bb6aa07b0977512b59b4f614e8f3803966dce377c58bfd799b39bd6f12e3fbec8012e5ab47de44f3b8f8be7b59d51443f44dba5104e48a8783200163e556c4a7ddf6b644d736f9008362a4c55a62d1726f6af4bb663e0329cf3569794474dc547e137c7f6e4765db326d1e674adb4218ad1b59a55ac74632dc597598a01bef170d54a5a03d3807a6251757e156b5b2b87df02fd6dd8aa39eb359b0a51fd820c2be2ac038251825d1afd493560e0fc3ca0d6ebb7c0fc8565af9cb755515ee2f06cf6e07733ab4ca94cadea2bccf2931a76f7f27be86a4ac1c011487975f9d1978d70bbc62683b0b0010b5db7f16843ce444fce8f6c7cd6cc30e125428e7975fd8561a538f2e59afa37368a719c49d70b13ed569b8cfa180bdd60e743c1f54f7a3daa988e00b73c49eb08668be53d6adc98010b2f2efe8bd75c9a8da2355482b6d14d835c378056407ef28e237d20980fdbd672ea5baedefbdd663ec0eca70f22dbb70538c692db94f6f65e1e4c593d13904ec78b07905de382caea8b7097af0b9533ffb7c451f981063ac96efbdb903f8989d1303aa52dfd85d908975e62b15e8ff93c34844b2a3c86d3a0b8b62b16feb9844569d06ee9b1ee75582f802b86d3090627f5a2d091122a374bfa69a2e67f3d741194cf4844f87b8e16bb945cafd7d279ff6457818970fd134bca0a78b5aeaa1e7cd91091fc332f8903b8d00940a67709bdcf0a1d444a9a05a0b6cdefedc34c9cf2d06b6315a91b618d9ff1f89e068f48f73997718c419baaeeec766a350ba4aa9ef7a9fa227182be1a40d449f55ea7132c59e40da072eb1b0106ece29815410c0c9f6a841fd8a072c5ae29eec033c675ee3371d0b194971cc77d4024baa58099ee7191867a655882dd4f3c7c07f524be998c08ebdf89730eb2a018d1dbde4060e90ff61cfa71c31650f7c458161e0ee4ee2eb39a453633a0155e4d7b79d8553f34f2a8748dc72fdd7b350003f06eefe15c4c4e46cc9ce8b05bdcdd344d01b4cea07d922733bee7b180c60c1894574477ce15785fb2a749f0fc2c16ff8827a6d5775d4cf1cb64b6881dadc78c84e19146120f3a92ff173078ce6499cc45f18d62b17ecb8f82f3e7515b0205b0e04aba3d04268bb80c5257058d5a92851304fe81b4efa3d2434c62e41464d64801c28c6060c57b6aba238cd0760bb92818499e65a298c6bad9d164006d8f7052d02d76f644ff85058e571f2af461e800e9d4111d117b3d99dc9ef58e6099729faee8402927ff28cdd0556dcf1eb27ca758a0062fedb87a94b33c2400b0f7f4ab88bd2bc3bd20804c6d79644149de286c57e1e481cf39cd929622ac726102055cae558f5a780b85741974bd8debb78e3d2780ada77c53dc9c3a4f67d34bdc647c3fd245a47674df9bb849f9a1207ca1ac482de125b7f8caa65d487042885a9ed84e1820d31a0ba8673e52486740d3d8ee8b3e65d6aff27e2454dd8c98a84e9020af4f07a558645f5ca1bd2b234bc4a4fc201dbedbd1d37ec0a077d06dc121b7326ce58eedf61c712d53405fbebe2eed9be6abd109498157779de9bc90894614f9de9f534c34acb61af573e714b73b7f6e162cba79c6b0529aaea9b8accae65a8607791d1846a8ecb9db7839e46ad703a7ab4392ef10c1f94b4f5313881ff2fc71f5ffb32289c1c61b179e5735079dda8cc0d9c9286327b4a0250dfc29ff73bce8901e67d2b5410a8f272d4f73ffb126bff23eff7dcc0981ffe962078add283396224c4f3723753fbc25bd5e2a7364ae405a80333ea47c91ca0d7b604aa8f4d4b7ba5702cf447b930fec80e895a0d5c608a0a35755d5b280263e6e2fb39c40d7d94d6b1fb212fe493ac14d9de8657572dd32641da822ea9b931b997eabf957ed494374858cf14a333177ea68dc99d8113f6a03bb064b430e4c9219c86d5c75bb627d87f1f3087424568ede527b0523125aeb6bf214caf03c390eecc54226ccec5fa8d069cea052685eed05af45f76d6b6d9b05fad207fa8b30063e5c5e59411f056a27a403a49c3ca37edc338983c92b04cb846565cb508caffc8baeb4c487f0baaa47d00e27e82d32f74438e08be77496cca13b794de2dae71e2caba00d6250c5a84258277cf4d752555731164d59cf8c36287c2cffae09f2e859be0f127810370d7643f06f34c8ff4361ccba28d1513c99aed8d209020e292289035997a622746e300dcf515b36999aebec1b7b2a7dff69eb028c15ff9a738a3910d9b4d9f1b2af8818942cf27643ed054aaf289af4356724aa4d85cbf08079e83cf12728b06f578ae6d511e3ba4c9eea710941355436a0e35ea1e586a879340b66fab99553c1a9e3114a792a4cedf62a000106dbb91c6d67bc3ba21f1308d6cd636067be9fd84329f3f0ee7917ee7055fd1a7d46dd05b14b20fd850c03ca8d2b6cccdf98b2f9942ed09a02716b8213d39055e033e606d764b196be8a72dbdcbfe103c6e66d8c0fe9c982223aaca65f581106770119fc193b2178f9663016b568df411939dbc58bf95b05fec5c911913f8eb5acecf4d110c6aea72813d4fe0d3f9bbc2dd5b9e15b01819e131391255661fcf31ace6624a36dadd9c8d34b200ba276c943aeb0904bb922360155abb020e853944e631a4c32e2b6bd00becc73bf4d5ff393fd52be8c79f3eeb918cbdd01628dddd6fd315102aed0bc879219e8aace9e1d5a191ea191c09571a02ec179b6c1e3cc703c628625b79b343514bd587764d60968f4150c90f2e4bd85d5508af34faa0d4888ee09dc0e204f33fcb5b9f848c3499028b95a8db34e3971a95292a8ef9661fff1f3ae658633ab8a4eba7a6ed915c722dc939ee7313351e916e96fd18bf5e861324408920abbc17cbd7aa2e4bba66a5786168413cd3ec6052609aee2e8e2630a344e9749e15f16568b65b59d3ff4534d9da7af28e0c4c69f4556dc3236202793926c7692868adf80edfaaf41f201fa556b941e670b851acea03590873cc8b413033af6c8b7e611d41b489419dee7760c5eaa17c286e325f1d9ae0fe58c0778c4e529fc6d654bfcf0c741fe5604cc25840961af81106e3207ce3bb4d496ea1937c808789ca45cbb613aa25ba2d7aba8a661ff120e3e5bb836bb589a6dc213fe945d298c313b407a797655da732040c125f8e84594c2d34232fe4954947952148ee46f5a3dec5523b01a12869e0fea4ff743b39d9176d0bcc5d72ca0947eea2c92dbf8f0f6937cd5710c2fb03d44fc6d96f10a9722860baa3a949bfb08d1c623b1348bc7df44bac3c218f096ca5fa5c20bcd3de2c62a8b6187c20d79993d95d49723a47f13da8783411221338c2339f70e012e7c505c08ad0a3d945a076308790b7f57bd5998748e80feb6fb09568dd1fdeec8b6e013bdd4d79d2ce9c3a8948463012fbaee613e0b39c6c7ab4f7138254e8ec674fdef035f0091ec986052f7d6e3fa2e150d3eea371552fe47574b502db7e8685431beda5e011cfac334066bea1bb0ae2204c4fb5c76f32f07e7bdb5a7ebf71bb5f62529f9834543673cf10e17ce6759eae4657f6ad44cd6f4133286ac2dad95f11ad35df5528193d95881dc5a8c69d9e9452cbb05c1832fa4156a784310b7e889f3eb40f2bad197130fd74234e6850ae69552d54fa6f05e9433dc2b565c6a8f197b1d7e2c6d24ab998660b1a5b3ff6b937909c605a0323c6c42bef4b8b12ab28bb0473c709a2a71f2bf820b9b294219b0871c1d855a84d08905adcd500f11f37b7a885e89a48aada9d3fbc988064c8612a84f2a14504d52ca19b7fbd2120aa058abb327cd4090a2f9e16f98dbc7bb05590b78be944d0b313e8a725d5d32880895109249a8d74af37584100f6330f2df310c17d0ae6949a104a21b7c7838b5d870b8e7fafd3625031493ef268a9d05e3791b42222ac0d533a97c092692113006dafb42a787391ff1ab8b0d4bbe7436162295678ecf3ff4dd36b0f43a72bc7b8bd82790e4f1b12a2d8d6629591ca03a3419c53455ba7900ac0a4350a8783dceca9fa97895083de054e30d85e0ba4abbb4ccf5d0413e468fbb499960b0b8e9778d0d1a49b69beccce2d0eb3cdb9794aa1bb91f3d2cbd7cc9eabf47abff929c33e93c3682b65829f67fe96adbd18e949ae9c2c0354c20a2952177f989bdd545442f4c4d23a0b1e66db6ec07bf9c8305c689b423233678ef71c42f1d1b5696ece62755b50425c8c1e15538a192fb58cc9a35522d9510caa79e35fccc01f20d5209a9cf44c9fca84b963374ad46afef796860c6d1f6e334c3fdc05285dc147509538ad1582e9132bcad6"}, {0x50, 0x113, 0x8, "9e589bcea275758f6eb2b03a6ec8a57d16fc59fdc2ac8014d2cee46336aad80ad12fd5be4e022054b1bd14503bbe03a3eef3de8ffcc77e90b517876df87b9af0"}, {0x58, 0x10e, 0x9, "21e57e0acdfa053c593cfda6903db75bb3d22b350d229d55f881f0c60f84b537ffc4f7d341fa4602fd78f03dcfa8689e0d627972a8e9f1bc26d58788aa3c596322de92"}], 0x1178}}, {{&(0x7f0000001740)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x4, 0x0, {0xa, 0x4e23, 0xfffffffa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x36adc83e}}}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000017c0)="9f8959a0849d81c420e7ede5ce59e604d2ca918c1ea19b10c7a09c433c566f7b1b22ea7dc300ebc865a16b2ee3dfdebf81659c1029294d465a6539e5107dd9cdb69065e5bf6861d966fa21e2ed98d3f7a2cc99516fc0bdb566898102370f7f4c5f471a66e5ae7350b7c6109fece3365e3e221f399a6d662b4f1aca01c8946b06f7", 0x81}, {&(0x7f0000000300)="6447e0342473f1305989d1119f805e867a8ae9b78731ec700a23c99d721a46020267386f9440a2a98e83b1", 0x2b}, {&(0x7f0000001880)="ef21ea4e226c3f73413f04dad5b9839a6408cd9ade0aa25217cb838f097c808997418e951bdf1e20caf161dc6f3b5367693fcf7c9716177281d108a8e00bc2fa0cb42c3d232dd31382ab376bd8bd536b7fd87955492d5f5369cc15a86cd31a3a66adf4c79146975bf20b4baac8a67fcc92c2e8863dde43fa082a3a5898614dd18c594b26764619a7fdf74cf83368d8b01a29d9cd7e6f1fab72e35ef4dda68ed6b03a055a04562505c5a59c50cf1dcb0cca90e8", 0xb3}, {&(0x7f0000001940)="d4d4bccd421414a8a9218e6afb1d5b89d2a1d93c6ac2bd76257b23c7fd8fbea7c9a8b598a33e09fb74a906", 0x2b}, {&(0x7f0000001980)="ec5e4b20cceff2050ae5e46d64c1bd2462f389b706abbf0d441d4f2f2f963ec16bdc5e881f31a6550141981b3a", 0x2d}], 0x5, &(0x7f0000001a40)=[{0x98, 0x110, 0x0, "d868d80fdfab53c9291f4633dc3c696cc3a33e7d73194be228ecf4f08b662e37a2be925c1970fac24677897361076e2e9ee50d1e8f395732bf151416b78e5d6ab49b9731456efe21f893ea5ecd3183f9024115a7cbf0004d784a625746506d9e6caadd953d37126051a0d373d83a8be9b4915d63423f01d1729fe2cfc7dfc2d6db297d16e197"}, {0x1010, 0x111, 0x0, "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"}, {0x1010, 0x10b, 0x400, "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"}, {0xa8, 0x108, 0x101, "a8b1c9ea93909a9e9891b747e7f86cd1b23542cad996e895b5eca8e1335dc7fcaf1570b61a05972770475348445718c61a41348daee2ad3c4c890bbf15d647b2ae0e9e67e128c9cac57e9d7daa04f037169fa6a57ca728647b8cd59d03e47d0c20d249d8925063437c018c6ef5cbcfdf72b4d37fdd1e1aa7f5c1f92c25b88323fe72c90d3b709eb2a9fa3f5a8e3dd48f33b7d9199dbc54ef"}, {0x78, 0x114, 0x10001, "84412be97e5613f1bd06b6c461324aa0de6d01657e6d55e5f8bd0085225f748625798d2102bdc6c2d4745e2f074ba2bf342fdaea8f2dcc9529b1ce8d807b948f0e6d46d3be4301c48325573cc7f240c39fe16db7610d6baaddb515ed56e7eb4126cb"}, {0x38, 0x111, 0x7, "a55eac2d8a5cb20d3e76c128abdf2786feeb4b3a859b0ad09e5bb5a3c8e137eadf073c30042e"}, {0x70, 0x110, 0x5, "61ca08aa459983583951105958ed70c5547fc3d6d091cd1d325d1fe7ea2fa2324337afeb6c0908bfbb9a5d02e3c74cfc99a35f8baac8671b8b73689efa327318d70a1751708a718f85eb921a680c61de4a63fb5594abb008635e514357"}], 0x2280}}, {{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000003cc0)="7782840166fd87d2d1c0d5fb30dd22c3ea06540a203d61a2c501d0ee666a52d72dd4af46b243540ccef58883f1f9483d2c2dde2582e62def068d5d5b06f21571e63f669cbf67cf3f89a1b1f28527f4c9f8c71a3f152b93d1f1be1beec4944f104408b91b6dd943bc39619b03dc65cf9bf6558b1426854ed5f16c6326c173bb5d9ff7728105b31515144a4a63ecf1432c82b2429effd5d826dbf46e9e0aca88e91ac82d375ed03e0c3c4d6e163a27dbb1d1c63a870945e9a8a9010ab75a58e419626e624915042acaf09a20716d0cda2044a058b2e9f219615ab2f93802169f3b86fb", 0xe2}, {&(0x7f0000003dc0)="5fe28c2fb83b6701c6bab7549efa9530a55c3344c976aac9bf722dc61a12482db2674f8959f6219805b75147f20e5a9f6ae204dff2931fd3c32e86076608e0791608308138b6a46d43886c7f2396a973d7fbd72fcc6752912d6ae7efd5281e7f1124017f39443674a3af6a6029994f98cbdbb0c23a69e54a857d564d3af304bd6c3f858ef775df4ff6dff0eeb20a1e99da2e29b4f66120263cd955c06fe2ac17e44b11aa65ca922e0d167a91ced15c11", 0xb0}, {&(0x7f0000003e80)="3ec519d8e46785d33af0f8155d43d69daa014baa65fc0a4c89fb35e4986b3ce9e9f1635c6c22131dd89d75a8e952038e4d1ce5315cb80512a3bf216f878bc55275d0c2a66f585715a5e0aa295044a7bd2a3ceae3170a53cf3fb456f512407147a9862398c8cccf64fded2152cf81b6b68c32393cfe488349fd57e82f7a8bd24f3ab9fc2964d0b4a3bd51face153ac7e4e8a73f8fb87722b931d0ce246cec7ea72ab4abce7c785bd9dc0994", 0xab}, {&(0x7f0000003f40)="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", 0x1000}], 0x4, &(0x7f0000004f80)=[{0x40, 0x119, 0x4, "2e234dbac4c8667886e23853925d08295ca69a3c547ac82073d520ba4715bdd2ee45ade83360c5fe52ffcebdaa"}, {0x78, 0x1e7, 0x7, "a53f6e84908ff2b9556cb2f95c2ada484bb2fbe5e0a2fd74de537919938f2c0f1208f5e056bc8e6fed522951bc05a4cae4dbb6b7ae9d61a3989ac57ee663ba8af5e6694a219fdb7c150f19c4a45e6158213001394ca19197841e85e3c03f8f9d51c339"}, {0x28, 0x3a, 0x6, "44a765abe905b7071edb9f849242d6ce78"}], 0xe0}}, {{&(0x7f0000005080)=@ieee802154={0x24, @long={0x3, 0x1, {0x89ebea32c50d8655}}}, 0x80, &(0x7f0000005280)=[{&(0x7f0000005100)="1f7c2be6835d7ac920905f880ce976d314aa3a59566382b00de6b06c704c780bb30528a0e4848e8fc6822968266fd7437bf8ed", 0x33}, {&(0x7f0000005140)="0ef21e8d720ce75872b5a182e96112aa30a77e32d6a262655062b52666a5b3e9c1a2ef62e1b8bf8ab63c5cd47457b506a43b27d9303b0401119e0186cd45b0bed22e21e22dd4c916a2b7655384183035e18bb4b7e5336dff766cdb574d347976a0df805aa2d5dd3693d84d51017b7e0a0893ae6ee6cf9cf51a6da3be2ab8361f85daf05033396e8d93ad548b5af61abacb29edf8f4a2ccb0a7c1b8a86a1051d4ff348a1dcefe1994d0e72a4fcef27e8ff1f3ea045417b552ef72a940f4c6bf39f636a9038ff530e0db6bc5e92716ca86", 0xd0}, {&(0x7f0000005240)}], 0x3, &(0x7f00000052c0)=[{0xf8, 0xff, 0xffff8001, "5e55e82817667238b2a681b191389336a2e9439875d8ae6dc5e4b2dc029ab47575b919a5d6b169ba79e315d18fd0859a3320f0f71fee18a8304d17087cd15ce9f372bec9f4331af1b4369ff64b121c0266e29aa20ea3c37ff81481f9fd878d571074b7014d32c30ae2a6c784b6f8fa6ba485dc08c56bf70acf76b24753839c507c1d5eba4f38caff385f76902010dd33fa23c249b3564e1f620fd469c4b8f0c70e33e5219bc4d7173cca6422dd6609276651891ba5452610f9cbc87bab4abde34264a79b28db8209045b66f63277fca969714717ac24fdf63d58c4d2d44b7f63d7567e687157"}, {0x68, 0x10b, 0x2d4, "74174496f6bbcf9061ec2615c88eaf74ade211b70aff8f4a228c7b48de6a7cdacce856f5108976e0f173e250f0d0ebb213aaba7f1418afea69e4217654f907fbef734e704a476a3b0c7be929b80d731a8e3d530d94"}, {0x90, 0x11, 0x6, "7ea73fc748c52b0d8d0379fb1f02b3d353e61a1a57c9a898f806878d4d1081799a27d991adbcf839379893a91787deb16d357a7b0d79f431885c78fb01ce271f7fc40bb2eef065dd136052c2003f15b3e24dffefb22394bac5da0effdfcaf84a37e7323ac55de5827b23f50c88eb553b1ba0be5caa7a9512fbfe5c"}, {0xc8, 0x1, 0x5, "d95738d5dd9711f7574b3f4f7dab84724ff8b9d6cedb68f9ed4aa7f37482dffa52674751c90248c7a80e7b0ce208c4982150b1ea4b2c16130ebd307b2454a3ca60740fe11f21c10666ac69956f9ccf8145df7cf46fe267cd5444e7a004031d64bf08de6f23601bca7ae3ef38dbcadf1459715d34c146c862c913f6b1cee4ee306cddbc57ab2bc92c4f4232a3960db200fb6cadbe1f3b0d31c2ebf66bc8bfc8871dad5a75fba13c02c3c99a1e71d8434c269f0d0bc66918"}, {0xf8, 0x102, 0x1, "73f725a3a22705d45e726ec56621b055f1f1c26fab3716b3c2629c56f03eaf4b851af645a804ad06311cef782c703143e00bb5677af047594e81f8877c91273021dfdc94f039cec9f5ed7445f27a0e8802d4faa4d45ecc239a86cc2f082130c98e385af6371ccc692f300c702efa9897b1272ed591ec192c9696e9f9567264cca300d7adcebbdb0613961e6a70d8f38042939ac6be9da34ec8bb62caa4abc250115c975bf2dbb35bddfab8f60d183963501f61d5cf2801be21e75b91f07887a394e09bf830fc27dee42774a896cc1dfe8ced03c38a714c9e32028bfd02ad9e0a16823edda0cc98c3"}, {0xa0, 0x0, 0x5, "92c0488d9390db1986b092d150bec35ce5df3127f855987fbd491ec22f70bf8c283a40ebcfafb5084e5a9271783975976f0b498b1744301c3b4fb0acd86ad9d62417c7b23de13b4599da337656dedd66be5b192f5bac78a3d24a82c6ae9b11eb3bd4cdcdfacd4c2e1bb8edb35aa55d5c88f2871d388f23a73199669627525817fcc9fdb8dcb998ef5f3b"}], 0x450}}, {{&(0x7f0000005740)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x2, 0x0, {0xa, 0x4e24, 0x80, @rand_addr=' \x01\x00', 0xff}}}, 0x80, &(0x7f0000005840)=[{&(0x7f00000057c0)="26c2610489251b6b15b8822681134dea37fb694e21f3acf838aafb6d40dd4600a52edb54ff628d9b5c6e48a20665bc819acfe041ea4da20d33e7fee57f3cbc2474e79273eb03a05571d4a1fef0c59d604e135be447709140d4109d04b4ac", 0x5e}], 0x1}}], 0x5, 0x800) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) perf_event_open(&(0x7f0000000340)={0x2, 0xcc, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x67c, 0x2000}, 0x30b2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) read$ptp(r2, 0x0, 0x0) 07:44:13 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x1000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:44:13 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, 0x0) 07:44:13 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) 07:44:14 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, 0x0) 07:44:14 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800007a5a9e0fc0b6527f35146b4e7ec039a2a64c9f76c762d7253a"], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@multicast, @empty, @val={@val={0x9100, 0x4, 0x1, 0x2}, {0x8100, 0x2, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @local, @remote, @remote, @private=0xa010101}}}}, 0x0) 07:44:14 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) 07:44:14 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x4212, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r0, 0x0, 0x0) 07:44:14 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:44:14 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3003, 0x0, 0x0, 0x0, 0x0) 07:44:14 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b, {0x0, 0x4}}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) [ 1405.043000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:44:14 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_emit_ethernet(0xe3, &(0x7f0000000140)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @val={@val={0x9100, 0x1, 0x1}, {0x8100, 0x6, 0x0, 0x2}}, {@llc={0x4, {@snap={0xab, 0x155, "bb", "e20b3a", 0x88f8, "4495d73290010c840818756375b7056f7b36131aba3690b174ed8babdadfd64242882f4b6b7231bd502d9fc56228d7ba7c5da7ae3e2e096686effe2b158aadf8922d01fb04c29b1bff71e1c9a92715a3ed4acf966651dc3741007ee45a6e8b663b9c5ba9854e7e985cbe00503e1a996a8e57ae1ef22facb466349dee71af551e52c69d06df8b4026c98c59a88c9fb2d6019b447ae1a8fef0f3c8e0e6df9c5dfc43bf261d45bbfa89872de9c3463f3324804dbeee30184c560ba2bf0c9ed3533d9c5015ee88"}}}}}, 0x0) syz_emit_ethernet(0x9c, &(0x7f0000000000)={@remote, @random="9b276a069d8d", @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@llc={0x4, {@llc={0x4, 0xfe, "ce", "d3798db0a37b4bd16c19237d9c9b866f6e94ca6cd04ebf01d10a05fe729fdb5716ed20d34b735cbdb401281cd38ec677207f244b22dd6e049f46d5507d9f07213facfe39211c60d77b09648ebbda08422a2b1a26f8b761050af78ce703bc9927112d748c2eacb8c442f941157085ddd6156daa669f4d3f86e19d56566921aa2d227ff5e3e92ba2"}}}}}, &(0x7f00000000c0)={0x0, 0x2, [0xbbd, 0x262, 0xfe1, 0x47d]}) [ 1405.058003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1405.070632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:44:14 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) 07:44:14 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffb000/0x1000)=nil) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) [ 1405.652010] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:44:23 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) close(r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup2(r2, r0) 07:44:23 executing program 5: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, 0x0) 07:44:23 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3004, 0x0, 0x0, 0x0, 0x0) 07:44:23 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x100) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0xb, 0x7f, 0xb5, 0x0, 0x9, 0x4b85, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe08, 0x4, @perf_bp={&(0x7f0000000100), 0xa}, 0x420b0, 0x100000000, 0x8001, 0x7, 0x0, 0x96, 0x1ff, 0x0, 0xe695, 0x0, 0x7}, 0x0, 0x8, r0, 0x8) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0xf3, 0x4, 0x2, 0x3, 0x0, 0x5, 0x200, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x200040, 0x1, @perf_bp={&(0x7f0000000000), 0xf}, 0x4c00, 0x2, 0x8, 0x3, 0x3, 0x400, 0x3ff, 0x0, 0xffff7fff, 0x0, 0xfc8}) read$ptp(r1, 0x0, 0x0) 07:44:23 executing program 2: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000340)) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) syz_emit_ethernet(0x56, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@canfd={0xd, {{}, 0x16, 0x0, 0x0, 0x0, "df19b20920452c3d06e5caa51667a2252dc9fcb7664ba0c1c9722bac11edd9488d6fbe455bf7216d9ef11474f3e669f9fb71d6df815a95a5d3b55f15deada1c2"}}}}, &(0x7f00000000c0)={0x0, 0x3, [0x77e, 0x680, 0xbc0, 0x9fa]}) recvfrom(r2, &(0x7f0000000140)=""/133, 0x85, 0x2103, &(0x7f0000000200)=@in6={0xa, 0x4e22, 0x1000, @dev={0xfe, 0x80, '\x00', 0x28}, 0x5}, 0x80) 07:44:23 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448dd, 0x0) 07:44:23 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:44:23 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:44:23 executing program 0: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:44:23 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448dd, 0x0) 07:44:23 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r0, 0x0, 0x0) fchdir(r0) [ 1414.677799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1414.686265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:44:23 executing program 5: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, 0x0) [ 1414.700182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:44:23 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000000)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@can={0xc, {{0x0, 0x0, 0x1, 0x1}, 0x2, 0x2, 0x0, 0x0, "f8c6dead702053cb"}}}}, 0x0) 07:44:23 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3005, 0x0, 0x0, 0x0, 0x0) 07:44:23 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x2000) read$ptp(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 07:44:23 executing program 0: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) [ 1415.486264] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1415.698565] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1415.700294] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:44:36 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) (fail_nth: 1) 07:44:36 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xfa, 0xe0, 0x3, 0x3, 0x0, 0x3, 0x0, 0x9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xd6, 0x2}, 0x4a01, 0x577, 0x3ff, 0x4, 0x0, 0x600, 0x8001, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0x9, r1, 0x8) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe0, 0xff, 0x5, 0x30, 0x0, 0x800, 0x8a00, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2eecce39, 0x6, @perf_config_ext={0x80000001, 0x3}, 0x40480, 0xa1da, 0x10000, 0x5, 0x2, 0x5, 0x2, 0x0, 0x1, 0x0, 0x200}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) 07:44:36 executing program 5: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, 0x0) 07:44:36 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448dd, 0x0) 07:44:36 executing program 0: mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:44:36 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3006, 0x0, 0x0, 0x0, 0x0) 07:44:36 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x0, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:44:36 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac2814aaffffffff00000000", @ANYRES32=r0, @ANYRES32=0x41424344, @ANYBLOB="500000007478000095b2c33507c2af6ae8523f9ed91706dcf6c014dc828aedc0845edbf5449bdebd8845db29"], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) syz_emit_ethernet(0x1e, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@can={0xc, {{0x3, 0x0, 0x0, 0x1}, 0x4, 0x2, 0x0, 0x0, "ed20efe192b67477"}}}}, &(0x7f0000000100)={0x0, 0x2, [0x29, 0x57e, 0xa54, 0x970]}) 07:44:36 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:44:36 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, 0x0) [ 1427.139471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1427.149330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1427.155416] FAULT_INJECTION: forcing a failure. [ 1427.155416] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.157270] CPU: 0 UID: 0 PID: 13661 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1427.157301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1427.157314] Call Trace: [ 1427.157322] [ 1427.157332] dump_stack_lvl+0xfa/0x120 [ 1427.157361] should_fail_ex+0x4d7/0x5e0 [ 1427.157401] should_failslab+0xc2/0x120 [ 1427.157424] kmem_cache_alloc_node_noprof+0x71/0x470 [ 1427.157457] ? __alloc_skb+0x2ab/0x370 [ 1427.157493] __alloc_skb+0x2ab/0x370 [ 1427.157522] ? __pfx___alloc_skb+0x10/0x10 [ 1427.157557] ? __pfx_ida_alloc_range+0x10/0x10 [ 1427.157587] create_monitor_ctrl_open+0x16e/0x780 [ 1427.157620] ? __pfx_create_monitor_ctrl_open+0x10/0x10 [ 1427.157651] ? security_capable+0x2f/0x90 [ 1427.157692] hci_sock_ioctl+0x35e/0x810 [ 1427.157724] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 1427.157753] ? get_pid_task+0x107/0x250 [ 1427.157787] ? proc_fail_nth_write+0x98/0x250 [ 1427.157828] sock_do_ioctl+0xd1/0x240 [ 1427.157863] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1427.157896] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1427.157924] ? do_vfs_ioctl+0x125/0x1470 [ 1427.157953] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1427.157979] ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0 [ 1427.158018] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1427.158066] sock_ioctl+0x40d/0x630 [ 1427.158091] ? __pfx_sock_ioctl+0x10/0x10 [ 1427.158114] ? lock_release+0xc8/0x290 [ 1427.158146] ? selinux_file_ioctl+0xb9/0x280 [ 1427.158181] ? __pfx_sock_ioctl+0x10/0x10 [ 1427.158207] __x64_sys_ioctl+0x18f/0x210 [ 1427.158237] do_syscall_64+0xbf/0x360 [ 1427.158263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.158286] RIP: 0033:0x7fef86de0b19 [ 1427.158304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1427.158325] RSP: 002b:00007fef84356188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1427.158347] RAX: ffffffffffffffda RBX: 00007fef86ef3f60 RCX: 00007fef86de0b19 [ 1427.158363] RDX: 0000000000000000 RSI: 00000000800448d2 RDI: 0000000000000005 [ 1427.158376] RBP: 00007fef843561d0 R08: 0000000000000000 R09: 0000000000000000 [ 1427.158390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1427.158403] R13: 00007ffdda9f12ef R14: 00007fef84356300 R15: 0000000000022000 [ 1427.158434] [ 1427.162211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:44:36 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3007, 0x0, 0x0, 0x0, 0x0) 07:44:36 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, 0x0) 07:44:36 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) (fail_nth: 1) 07:44:36 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, 0x0) [ 1427.302994] FAULT_INJECTION: forcing a failure. [ 1427.302994] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.305346] CPU: 0 UID: 0 PID: 13678 Comm: syz-executor.6 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1427.305379] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1427.305392] Call Trace: [ 1427.305400] [ 1427.305409] dump_stack_lvl+0xfa/0x120 [ 1427.305439] should_fail_ex+0x4d7/0x5e0 [ 1427.305481] should_failslab+0xc2/0x120 [ 1427.305505] kmem_cache_alloc_node_noprof+0x71/0x470 [ 1427.305540] ? __alloc_skb+0x2ab/0x370 [ 1427.305577] __alloc_skb+0x2ab/0x370 [ 1427.305607] ? __pfx___alloc_skb+0x10/0x10 [ 1427.305644] ? __pfx_ida_alloc_range+0x10/0x10 [ 1427.305674] create_monitor_ctrl_open+0x16e/0x780 [ 1427.305709] ? __pfx_create_monitor_ctrl_open+0x10/0x10 [ 1427.305742] ? security_capable+0x2f/0x90 [ 1427.305784] hci_sock_ioctl+0x35e/0x810 [ 1427.305817] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 1427.305847] ? get_pid_task+0x107/0x250 [ 1427.305884] ? proc_fail_nth_write+0x98/0x250 [ 1427.305926] sock_do_ioctl+0xd1/0x240 [ 1427.305963] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1427.305997] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1427.306027] ? do_vfs_ioctl+0x125/0x1470 [ 1427.306065] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1427.306093] ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0 [ 1427.306134] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1427.306177] sock_ioctl+0x40d/0x630 [ 1427.306203] ? __pfx_sock_ioctl+0x10/0x10 [ 1427.306227] ? lock_release+0xc8/0x290 [ 1427.306261] ? selinux_file_ioctl+0xb9/0x280 [ 1427.306299] ? __pfx_sock_ioctl+0x10/0x10 [ 1427.306326] __x64_sys_ioctl+0x18f/0x210 [ 1427.306358] do_syscall_64+0xbf/0x360 [ 1427.306385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.306410] RIP: 0033:0x7f0179610b19 [ 1427.306428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1427.306450] RSP: 002b:00007f0176b86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1427.306474] RAX: ffffffffffffffda RBX: 00007f0179723f60 RCX: 00007f0179610b19 [ 1427.306490] RDX: 0000000000000000 RSI: 00000000400448dd RDI: 0000000000000005 [ 1427.306504] RBP: 00007f0176b861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1427.306518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1427.306532] R13: 00007ffd354c469f R14: 00007f0176b86300 R15: 0000000000022000 [ 1427.306565] [ 1427.958644] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1428.034688] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1428.036096] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:44:47 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac2814aaffffffff00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="432500008177ffec"], 0x0) 07:44:47 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x0, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="30b619d48548867a081ec2ed880c686b2fee530b54b69bc894c2394f0b48567943e619bb3753ab149ea31a7c88bdc5011c3e76a849281416b8bb1d54f5894cb18fc1788b7b90277785a836d546ce9a05981dd6c7a4ee578da4765ae7219b1b2e602726a1976b403d7feb57e3c72118af5b7cadb0deaf6a069373cebb5e4c113aa8aaf3cf9bf16683d661f9f081b5f338566c1b011c47bdee03e1ce5dbac9391ea06cc2326a5c2bf1f125ccc2eb922a8b6b33da62f47a4f6883d89b7b586602391ce17b9d567a23012e912085ba11278722dd4ec2c716ae5cd88317b718dde7a9892542c43986cdc489ad8814c4a922ee0dd1cec042398b3c5b587e6c6d9c748253594cbbaa26861ee41de2bcc48ca2247e006deffc8fda87ee1a381df52e267f1367e871c6098182fd0780c75a471fd6b139d729b0eab8538e6c3619a4ae23513e9d17719f2ce7cfcce7abff61aac656c68cdef06928e62e7baf45fdf492cb8419a4ff239b70e352f2e5b09b4bbd521d6d586fc8bff2e46e66a77377d309489e4f4b791622fbb704ff6a18ffdfcd9166086a54a9eaee49c74d9713f3843142ef314b665571b3a8400ca93139d0d6cb839a1b0b46efa13f5dac91e014fb5727862e5284b61dcf73217ee2ed5c8d32765ae2a23e90fb6cf778be6ebe561a583b9bb6932d61143baf2f1864dc2350bdfe61587599de3d4a2bb6c501d3e4cc2017b106499e10dee2515bcc540d7665b15972925f10f27067dd599e847fddd257609db34d23857946b92cf29a4b8dbfd16c301663de9adb6ed8405a8685ad3e847cea97328f40efb8788de95cb71adcabe40631e9e82d30d048ec586bc4af2348d8f70ddf606339f0a3ef4d3e9ccd0a5dfdfb726daf53da373877142b35bce3a13695048614a61b6a0782128123fb35990b64dcc5f4c33f361270c01cbf0e892c7f212881f6d03a1165cf70846c59c21e36db0d08120a43c8414db6669053d4ec052baac1bca2b130dfbf490475a73514068202db02636588d607954d9e4ba99e6d1f05d672d98261f0cddab85e3f0b0d909108d29549a9d22ab310e6c296ec89db9ecd1aa7033b683c1cdb92c4be76f6ac82e4e0ab938b2e"}, 0x354) 07:44:47 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) (fail_nth: 2) 07:44:47 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x1, 0x1}, 0x6) 07:44:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, 0x0) 07:44:47 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:44:47 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x0, 0x0) 07:44:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) (fail_nth: 2) [ 1438.320753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1438.328244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1438.336320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:44:47 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000007a44391482002e2f66"]) syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac2814aaffffffff00000000ac1083a4e4928a4db8b86f3d6febeb24edcca0c4f2f38bea9f4baaab216c56cd4447a84cf845cdea87d45431f4ff2ddb6916e3f8bfcb43f56e48f4bdd3fa13dc531932f36e5c85dce4442116122456d4be57d67108924bf5b356f006c0dcdd5b41704bf7537944fd63fa0869c0f86275d3c51e99081b09d5f79ddcb5a70a49735e0f80be8900000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500c000090787b72"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @val={@val={0x9100, 0x5, 0x0, 0x1}, {0x8100, 0x0, 0x0, 0x1}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @remote, @mcast2, @random="4645ade90bf8", @mcast2}}}}, &(0x7f00000000c0)={0x0, 0x1, [0x49, 0xd3, 0x15e, 0xef5]}) 07:44:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448cc, 0x0) 07:44:47 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x0, 0x0) 07:44:47 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac2814aaffffffff00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="81fade1ea28a8e25"], 0x0) 07:44:47 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) (fail_nth: 3) 07:44:47 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) [ 1439.145394] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:44:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) (fail_nth: 3) 07:44:57 executing program 2: syz_emit_ethernet(0xc2, &(0x7f0000000100)={@local, @dev, @val={@val={0x9100, 0x5, 0x0, 0x1}, {0x8100, 0x7, 0x1, 0x4}}, {@llc={0x4, {@snap={0xab, 0xaa, '-', "980a4d", 0x88fb, "659c817d7ecbe7710d06af17b5e9f5cb94dca0fe28f2324691c8d4e16709e8a30c32c2348e2142ab8bc03a938375b5a62d551ee8284785e7739777cc6d6144fdb82cbe8a37074b59a09f4ea24a376382bba5d9b79a5f2f7516a4c2e5fd407dd4ddc30df08fb4997dcadba43cd3fac235fd981e8b88a9999483748f8658da467e82e245827210f6e9f1e174efae04275f7e8201d493f380b89c444e16cb91cf2c3cc8dcba"}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 07:44:57 executing program 3: sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x3c00, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xc88c, 0x4b}}}}, [@NL80211_ATTR_FRAME={0xe6, 0x33, @data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xe, 0x0, 0x1, 0x1}, {0x40}, @broadcast, @initial, @broadcast, {0xa}}, {0x7, 0x1, 0x1, 0x0, 0x7}}, {@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x1, 0x0, 0x1}, {}, @device_a, @broadcast, @initial, {0x7, 0x6de}}, {0x0, 0x0, 0x3, 0x1, 0xf0}}}, @a_msdu=[{@device_a, @device_b, 0x9a, "601765c83d94e6ce317030709174403894f029e803a4bddfdf8260ac1d03f01baadd4a93e1cbcca2a0bae657dd12a1cfee5529a543a8710041a45f130580c4220b3e791ca9b7fed75170b464398e6015a13260835bd4bb2f361b4dba494e5588ac25fdd3f5f2b26a360839c9c07e539c4172c04381269f484561b98b2afe26b01f485522bc5b4154c001b242e89d694be417c1cc0b2e9da43869"}]}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x509}}}, @NL80211_ATTR_FRAME={0x362, 0x33, @mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0xf4}, @device_a, @broadcast, @random="bf4a2b91f935", {0x6}}, @ver_80211n={0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x10000, @default, 0x800, @val={0x0, 0xf, @random="a2486343362e7cd1a7839969985320"}, @val={0x1, 0x8, [{0x5}, {0x1}, {0xc}, {0xc, 0x1}, {0x60}, {0x36}, {0x18}, {0x1b}]}, @val={0x3, 0x1, 0xb7}, @val={0x4, 0x6, {0x0, 0x9, 0x101, 0x3ff}}, @void, @val={0x2d, 0x1a, {0x40, 0x1, 0x3, 0x0, {0x800, 0xb40, 0x0, 0x5, 0x0, 0x1, 0x1, 0x3}, 0x6, 0x1, 0x20}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0x1, 0x2, 0x3, 0x40}}, [{0xdd, 0xcf, "ff11f0a1ca9661dae9ffeca7dd72b2d9f0dd1bc34450a665c13fa759e1379862907de9a7e0664cb2aa1ad24cdef857deadf076fb1fc4626a3fc8e2dd9e8a7e014f2d4acd083109b2ae98b0a3de4b7f4dc79cc8abe82d544125dacb352688e5f32d1668757df8e5b22207ac5531ac6ac632ba5617c9cc558899d7ac13c4067a69859ae9f3e35e2922fec8d8c70e87a701aeed28015cf078b72ec9f34a8e812a133b47d18eaeac6bd4e6b7e7574f07d42d00a7f48e77a7bccdbf25b9a6d297d36b6480ecbd3bcc20f1ddf9dd5033e2e7"}, {0xdd, 0xd6, "428ae70ceb0b4f95c026efe86340cc465add73e54a35e65ac016e571b7840efae81d4af1c7211aebf258dd69d8e621a96f1e4a615febca832d6226c578eaea59fcbd2b5cee3f32353d7064635a9eed03609d1889b3cafaf33b6f1d45f058adbc0fe3dda21b108e96b8405e2759a8558ea679dd355c829514f90d1ebff5c2e46436359f0f4cbf25ddd42902788cf9987907e5fa7425ad7fcba94a38c9d148366444e446257c7e1cba5bcd42e42e54a1b3740854feccbd7025403ee1a825423b8a8685d45eda911dcaa619efc90ced5091c0de85539278"}, {0xdd, 0x83, "65cab872ac95e2935843f13dfe400354a3992d36eac638913d8254238f89b63ee1d6a83ba388b4c390ff06edd628d5190fcd8e4c2c2532db8ea38b35343b781704d8e67bf31284a29594e39274bc2807948a8f1689bd6d3b738c5d679e853711642f75d7662073ad3304727eda747e759d895175128d2dfca7efab8285d9a805dd7e82"}, {0xdd, 0x3d, "77b645350c877021c6f49565d647bca326ce9778d49bca8a9d853b0df037dd068e48714988948896defad2b3f505f5d3d50600cb01e935be1284b19cb4"}, {0xdd, 0x7c, "b33c4c36a1d9e6ed27248b81d12c62c6200c254b93d72698ee0639c59ac3db4518af93cdb6680b855303dfc85faa746f85578fb7dd10892ace6e84656e17d38a193ca80bd994b75307ffb6edafaba0c2fe58105129a36006ed59865004f369a51d505b09d8dcbd6736c903e85111c13e71a8a7ee2929ec9f019c2796"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x158a, 0x33, @data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xe, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0xe9}, @device_b, @broadcast, @device_b, {0x2, 0x1}, @broadcast}, {0x8, 0x0, 0x1}}, {@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x50}, @from_mac=@broadcast, @broadcast, @from_mac=@device_b, {0x0, 0x7f}}, {0x5, 0x0, 0x3, 0x1, 0x5}}}, @ver_80211n={0x0, 0x3f, 0x2, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0x9e, "be218fd9a5baf79f039c3566fff871fdf168af4d92ff371d31871482fd52377fbff8e20506e29e35cda8bf1a61ba9c6b7e58951d1926a45ad6954de3a774aaab0d934c4cc5f77c05c9bb47b7451a8bf0a362e08cda2cb98b10957f2c8d948d5ef8af8e99ce3c56427ffff87d81471984d248834fc2ee7e073ed7b4dc0220b48c37a66af1aa9e30efeefa8d30ec609b37cc9ce5d8af5d5b70ea0ff24a329d"}, {@device_a, @device_b, 0xd5, "d4c52da6e90dbef4fd96d27667681da618c3f2ffd076f0dd7bedc7e025d87d4bf7cc33aab0055183e7dd8060cb720c3f6d1d4b7783dddf401ac471d9016b893b0ab6377d87615c5a8e9acdbffc19182ecd00ed6c7cbd62312d03428d3c5598fc49a6b25ddb145eb2cfdc1a511517a4b3f464e0a686f989385b48ebb194254e6e3f6389de36d8f618753ca789d309ac21be02112b2e320df440ae219a7f362e5a9daeccadf35bc2e21aa1e6873c0a568202d2a455ae5a1552e61625ca7ffa0876edfac883389320c8e9862c43823c0999718df2de8e"}, {@device_b, @device_a, 0x1000, "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"}, {@device_b, @device_a, 0x5a, "62c079c10313caefbc7013160052e690ffe7aac4dbc5d2579f40c734227b71270c79391a8d61c63f1cc18a1a8854a208810c239b093a65db95346bb1b318362c6d762d7f4c75336f264790d711b5bb45a28ad5546f503f70123b"}, {@device_a, @broadcast, 0xa8, "804cf993f2aac7d3b7066b8658e5c0408528eb55ee6f6c817d4f23398caa28abb9ace6c9308d716ef076ad40730d713ca134e1059e369a93c8bf641ec4c2637fd3c89be1d3ab526af2f0d4a4682b4d9fa7e3d4246b5b783619c554b586dae964774b9a20677394c997bd3a41781896a245cf2b671d8fa03951de6c662a48ca35076f2d6aa32c0fb1857ce6bad052f3f9fe5134f1504c4784294b0429e0678d83d046a608d7ad8cf5"}, {@device_b, @device_b, 0xf1, "46ac0444725c0829ed321be5e1a20bae86273c160130c0c39232b0a0def204c78b7e68eb6e9f337e2dc6ce276b7ff90a7d537732b912bf52ceb804892304ba5f220826af3184e156390af521af15818ee26cac4a858760eddcd5ea66bbae05949daac86969a1feb14d55dddb5d5a31265aaa9cd55625183c31027eb5a5d61da44134cd7eba93d002b1206cd33c604b156a01cff9437beea559cb62d2ce10a92b8d44fbafe68267953bc54c5bcedf32534a9b81c0a00496976219ad481d9ae05f5ab548b68df3c9d7aec187adadd45ddde1822d97af82de64c892cca23e758f777e0d5d7df4e44e9dc815be30df88fedfcf"}, {@device_a, @broadcast, 0x85, "537f3b010bf34211cde9ab0c0b787fff8de15624d159e6e02c82e9035829f9b5bcbe61df490f70789914284d05f884f7059bdd5ee8872c4b338e238df69e04bfeebd31ccc827ae45c4db262d5f41c43f208b1c39eec5be89cba34d69a78112f1fea2594cd4e4de1f28978e35533c4a6c3224c8a2a84106fc7539b7191bef75e2db193eaf1b"}, {@device_b, @device_a, 0xe4, "4bafaf4ca4576248b3466b685a4bda42ce585a6bf9ec30c0504f2654dbfa83f1232620bc149cce504214a90bd2e40af4fbd58cec7bfcdf165a400298036139658b380bdb07e88b598406cf9b2b9741d46c098361016374bcf964203077235b15d0ea53bececc90887c9a62259561a2945339e18d314590c621491a80b021b42d660a1c4404096da9bedbb43724b996c753c4957182c31a20f554eaee68162121a49b7fa69df8251dd94d01189aeedddfc45df2830d67b261a9c7ec0f6e04130603e11787f5f039b13e097951f172b26ea542b4b130876b47f739a82ff054f87b125051ae"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x7f}}}, @NL80211_ATTR_FRAME={0x21ca, 0x33, @data_frame={@no_qos=@type11={{0x0, 0x2, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x5}, @broadcast, @device_a, @device_b, {0x0, 0x7}}, @a_msdu=[{@broadcast, @broadcast, 0x10, "c780e99f92a59df6551dfa9064af1edd"}, {@device_a, @device_b, 0x1000, "c036d4e0322c00c78b8785844101b4e516a1d6021b9434776d1ad1f36cd76f707fd1ba4d014aba35e148fc34f4a50bcd2197359173b3ad2601e696764e8f530778028cdce4089f050cd889fc55bf99f522090c4cfe768df1ceb6db989b3d73fe0326c8175520d789e56b1aa456107d545ed2ba7078f1b55029be861deff702f2d5a93e3c217a43b9ec3f146d93023f9b1ab24e2c302f144c9d1c0a0116d0807a6516a87aa7cf9ad97cca1e84a22e21fef6fcc4c2d04c72a60d233f016fd36898e88eadbe09497d6692d5a73485cc61cc508ffe67a645d7a2d0515a10b4152aa986ce7e001c8d7b70e046302a262419139f09e410b5aece2184cfc14116c3f62356acc08d6c38f814cf13cb3bd61542de0f6f8379379575b30ef7efe0cf1b43833e700dd0ef4b5585c7946fadedefc99396a08ecee9d09bfd498a53cf19fe9a06a3ae84b18e52ca0866047f9ad788f5df4083de94c56f62230cdb73b594969306ffa66a0eaf72328755eee652bcf65244e957e497e4e5a854234891af06f8a5d18e405fecb608b8d799443e363ea32469fdf2ed42458f240295a17739262aca935faf23d0f04a5009a0880a731837f22416e4bc4673cced74277de3b9737f0ee55ce97fd12a83ad1b6efa33ae0582d96c79ff15a2af43fabc6f0c2698a7373b060f05402eee118ccfdb78804a64ac903df9d87c98de36a967465578e6b110f1c9d26a55397dc0df9478fe1248752088f6da77b14a1d159900f3ddea52d8c740a37d35518a304e498c1f58ed7a3fd555a85abd7aa94ebdd34fe00cdc749e69009d236a0bcf6be58cc816489b1b4f039d2cab41a4d9cf89e32eb884e275f86ae8b516146411c0c537eeaa9160b4b6497ca9a8d6a885a2e3eaa0a227e2522a2b66d215a3a4e6e29f1a899c207d855411c6c769c4d1d29f642eb9bd30ba8dc692aa9c6c8acfd24be49430da1e9dcdf8c020ed9d6cfb21477e3b1ec07c20a5b18c36f64bdefc11664a55d3e0412239caf1d46cb71759f7c3dfd3d7daf41823a50875af15b73b371df2fde7fc847aba9be7d355b95d32705e035d2aebe67a961be427f553a25223687810253264da1a14d30ee8c5972d2686ef67edb7b700811bddb970858835bb949b7b2cd69b12701e399491337c9df7cf08f11add7968a190697fdc77d9bd9637ca2eb39510370298b87da0a7077ac07e3a071198d889b1de4626f4d86ccf1012c79db24283c0b88b3a49f824998e9ca6367945e59a7130d0facdba1ab5a698d1f868b13511d4cf42f4befd72a3728eb67d9c6414f0ef9684ee186a75ed7660246a6c95be3cca9115bc71eb204b1e9442ae08a00c4ed332638bc72093077aab947a05910da6cfdc9b03d01f4d2f76e0f70e9e791b71f128326fc363ac170310ff7bb66d1b192b56c6c97272a102fa81c641f5928873bda0e5667b3205dc2e22bbae0dfeb2f55993ce0d093dda0fe8c5f055ed37a3151e4e9a23b96bd1456857aa340bd5e8eb650604f549326f9b2be5ff8e57eb38fc34b9a85940a39673ab8c085cd7cc935ec4cc4e21a678b4f3729bcde03174090df6e9128a81500bfc41f7815ece7f0faa21ffd2673d006b8ab6ec25abc891902dd69880cbdec62e7623bfebf0c2989dd315b00626a32777955ff455a44749bd118672394391e2677d73dd744245b3acaf0b3f99221bc3ab19c745e908982519a1b2c3fcfe718700845cdf5a799cb3326d038a7be0356ff63c8c1d8f7e1aa7b8eff9f90802d6e5c2f216587f11983b9999f7453af9362c277ee9a3742e35749dd5a6f2e87166dffd70d546665a72d0b12641b5610553189e01fe75a0f6cdce7ad29a0a1f0403541cd7214e104628cd79c54fe83f6e8f71822a3c2b377d0be6ca000e0a0e79a45feaabd248d8fc765470b2b7d0a07baff900c8e4098f6686c2b30ef4dfb17516fa1a0717da14de0664d9e4280bbc217247e73823c7e7e84b86370f2b3cdd8bd7c289a1464b87a1d79e2ca29df4d2155c1243cb6df3c7dc0aa0120674a51a85031a01352c96be8458dd59f5141e2bb6e438e9e13ef2177b53dd8b3661ea85c016f42f7b29d90c87bbdba8da593dfe45f796218e210215d3bf824da49dd485489b50259dd45e15f82f50b98cbf3beec7ff49893581ccd51c76ac2c88307b345264ab1a9ede0e0de1c3f3b16867bcae5a5c862a1b0417f46efb7f1f8459a5412825e61f19ac93efa688db7449af360eef23518492b7185dafbf443e6aee825702d23b88853b3ca6eeea27fff656d5d481ec4561e52d998acd8effc82e539c361baeb4d62feb9fb89d6438b80ca1c3edbab2f10902cd082f0115a97af732c22e758c438c4f8fcdfcf3be33719c152f3227be475eb48645d9df8d109a605b454e12b8f385ee57764f9fa99efed6d2c3c6c1feb70e73d0fa77f0f961ea50de27a8ac06ef352bd9bf50e6fa6388ac363352c2c0817fe6674f85d5184b087f72da09dd0c250c454d0cf2d86b5d556255a4fa287013e684912a035d41ed613ffff97f7fa966c7fc12f50f1bcf225c37c8ca9d50160fc5e2e4c816a606dd94632b63ba20e25c0b86fa5e9191222eec220fd58577971c22ac363c120a4d40cb6e43b738e5d5e6449aeb372af5ea59dd35b0287b8e2ffab97228af6adb6388fca6e93f463a61e9b6372c93f4fd9d3f2509e3b4a18a334db5d5a48c96866bdf0b5217c0c7f10ecec92b51dd4e58ce8f6ecae07131bde60e6ec87bc74b08d9893380a724a9d686a8f330fd5e415033fdc35130fcc1fd0cb9bb69f8e7ddd6625cacf3b68338ddbb19bf254de4d87d55d245125b9a481af4ee2759f2c0a79b6c3173b3e913be29854922c531eff15d7344eda67444ef65ef4ff17a3815e8fd787e63ca086f2afd437248131a50ae5b3a9ae3755d2bb063b8934806ee2a7063f95b59be224d8ab344468beebbf050d181afb7eea129a9b1b604eb2c88103251136fd28af7951d21c8bcb9f70a4c34425a07cd8baa317e372f5e1bc567c054a0a216e20db1e57bdf394a98988036912dcf14f063629799a3c18b04bb4e2102ef7cbcc47fae25ddc7705366626894321e62e028ba8826b0ea4293618043ae8c0e9c0df95d4c387403f96e94a90422b5362fd97f8a557ca6951ce88e20c9872cd04ffb2b17ee67186fb1e2e8a709b085410f1a694db6a33eebcfc51c8c2d7de6ee26cfca78d58a10d55e803db626efb466cfdece88e31c3a7c71e3fea90a0bce7e6d0ea549ecc257a858743e49f188b5929b7654368dce3128b551e5190e9241a8bd25ebc19c06d8b752edbe22c53e106bc681088ff174104a35c32cf23e40c6681d8a2e29c8aa07b5d7c34939387be89dae68d2272ff2bd8e34ae404a210ea97630bc46cd8529b0289ef65b2eba77dc24c3ff4eaad74f3591efff2c7c6197dc970a63781cc71db77cffcd11ff1ae0b2241d69dfd354349c74e393ff9d9e7a9e805f2d4f6b72c00b86d1862d4cb86da476677942aa85c8c6a4fdb2e0bd586ffd18be2b7f68c99cb7077fd31fbab4bd84c90f75040fcc8ff14bbc67b78d339f37f0211b6c800e7d944cb998f06d697cd5b47e9599aae90647f7e4cc48b97d72f78def035e76ad8cf2c1256514fb084c5c027c3160d646adc0636114de3630ce5e17ee486a0bbac5aced41747633fee60f967a0337465ce521cca57946b0e26dda7c9c3935f2a3af9e969458895ee22f9d39ad0a30a26eb710f605c83e814e2178611c1232da9759ef00017dc15b9bd069e4101331a4f8358d68bbe7fc49582bdad67f1dbd70f761027ad77aeee86db1695e46c1521a4670ce6d80eaf99a0f4c31c594f0f4d668725564319c8b0aead2bcf8872db9f99df1f83ae5ed4c950d0c0e468d4987f48f01a800ef954b61f3e99ccd2daf8fe200623f7893838e6edbb6ad0186d4f4b335a957629f23c91f2166be99d149d6f5a7bf68d7e01b19341bf68b72c177f2e6e35e0a416678754ddb33a826666f8db4f254220fa9b486de83341cabfda8494e3d5e1c71454abbe8e7b5106e31589620aef8b07bb35d01a4b1e4d53666447b0dd06dba7f4ce2306da096d3aa5b6bc2180ede2c10799301936ab1ae0b4753541c65c560696b43112f0a03b314d77048c0a9c882a552e697cfeedd782609fcd4ceaad0ecdf567909c2886996a05788acaee508ac383d046d2c29331986e975eb1ac44d26a531c9243215f8eadf2e671723c826018a1372e7ad189348ecb4cefa3e234e199631401b060ce930d145dbf35e43c49297ff1b12acf8d081a731a5cc56ffb7de3f45a483a94e8edbcb6a65a849e7d21e3af59ec0679abfe61ec720b548b6b2453a5e0d67d1a2c06df2ec042178aea90307f34736cebcd94b6652e6d85650a95ba1e3c86e3a9c08fd2c2102b815de2eaad9d9fdd7ef881ea631899ed8a59e42456a13a4cb6a21879953cc00ef651318649e4c959caedf9724c3adb9e170a4019f52758e8e09e0c6b32a3da8299bca2529c17d4a7a42fe691ba25c427b028555b6c31ac81a95b6fd74f329414231b4cc9c91599d2aec3062e633da8c7a505e849e4190c663505cc76dc79019185ad2d5432b6e6f4b72538d5906f26142ae7cb8270207d5cd837e82785900e673f373b0b7d57d2e897432e6c0b0ee024cebc0463e6a12ed047f5d622fc86983c012c7cd255e2a3f3f93f5805370bb5e3c11bb3c374fd781a9aa3a57b86e4b801a523aaeed2a27aaa375deb006fa3c73f9b17956aaf29d3fa82ab859a67916e2c8d8b99022ee2472374af14909840016b5edbf359049fca21df85546b7787b5f947f64071a25852cd8e760acf95bcbbee6d2c31d59ca17c2e277e187be8b323a6dd3c4c6104806fb6c123dfc72b1d386f666f9e7976f0b383261f80fd74dfaf2622afa36d069211b6dcb7a8c34db38a54e139e6e4be874890aca82040c419e9da5882e8a9417d4925ace010ad3b41ae5367d20323eaf6f809f557607a131773a21eb77fe5e79e89ea5bc60f7a88155d5b51dc35f900d4e86f011ddc98717389bb132f36c7f7c6e801a2eb377e8183d549d855fed7357284e71558be06082d7d2810537bcc64ac1be2ec23e83436d3d46be3ea154441e6a42b1af5f0f824cd630d13c750ceea90eafeba1fa3a00d71fe239c89098cf6793a81b86d8cd1574eaa85f9cbfdd6f86e8bd0ab7b73c657f9930a84a32a9417833edfe7ba7ce9fe55fed37957cc6254d114d919f512dee11710b91be7d1f67f4117535081a3b2994b38b9cd495a4c0706ce328ba7f9f4161ecd397016d3fa1e40eec868f5213e000db280a622b020d977d1038ea62a7c7bafb800d4a89cddd09a6639c3b94b435105c438001a349f4bbf9e9c29ebe92aafe73f33ca7412dc2784203345cb9d4ead2c2980669ea60f1e9aa79722174c4fc62a4b2ec0fb691ad1043d2d076f5203e793256af705aa319e1c673c1c5e2e5e652e31a81febe5fbece208f41ac44b7dd4454b03932ee5829c24df4b6e3961fbf714e221c9183b4770197122f49032a02695adff40096b6f7faa7d33b11062c3dd1d226b91ad8f72d47079168450f70abb1ffb383e2f81fd46822d662dd2cadc8dc58599eb1eb26b9c28cb97749f9f7a604f43ae34a4e9f0e8c6648bf275223bf29aa68785c0926edbc138adb7d013717bcc08053fc0887642611e6d3e73c4b6facbfc2face8085cc245960881a712132faf46854d1109a16e3041275da370765089753aa7ae83ab800f42b4abaad95dfa4f1d61d36de1197e494b0ceafe8edb0227711aba5d835496572b5"}, {@broadcast, @broadcast, 0x9b, "ff4a3b1a9a4aa982a29da0d281c8d5595e69d3cfa39852886166c838cc84165e8c0505f8fd1cd8a76dc54ba2a3ec38331909cefd917f6578483d0694ac1d37f80d00540ffe0230e581b240e2c0eb4340bef86454ee090d1f481828c7f167ae15a4542cf1d79f42ee053653a6c853dde8f7bef224363d3e3fabd385c1ecaef99e0c2a9514bedad0c772785b7284facfc5e62d0274e31e07a23581ce"}, {@device_a, @broadcast, 0x1000, "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"}, {@broadcast, @device_b, 0x58, "3f327407370d650dc73dc9782657762d2645649c5c614f6c9a0d795270d6ff08749c2563cfbafb0b31ee34c44b563c1c1ef392539b4f8a6642ce3ed5237762c638abf17e0bd530c7e0c59eac60bfc47f2b01364efb6a5ff7"}, {@broadcast, @device_b, 0x45, "a27d435740842a3d45548bad6a6683a74b13399a14d109fc50cc6ec393efe3ba519f1ced37410a12c1dfa5914320941add72de6ffd3b81436ef3c474dc9a76041d45037e4f"}]}}]}, 0x3c00}, 0x1, 0x0, 0x0, 0x4}, 0x4008010) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x60811, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x382}, 0x3012, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 07:44:57 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x0, 0x1, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:44:57 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:44:57 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:44:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448cc, 0x0) 07:44:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) (fail_nth: 4) 07:44:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) (fail_nth: 4) [ 1448.227706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1448.240236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1448.250362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:44:57 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x4000, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 07:44:57 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:44:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448cc, 0x0) 07:44:57 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) (fail_nth: 5) 07:44:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) (fail_nth: 5) 07:44:57 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x0, 0x0, 0x0) [ 1448.347794] FAULT_INJECTION: forcing a failure. [ 1448.347794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1448.348772] CPU: 1 UID: 0 PID: 13751 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1448.348788] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1448.348795] Call Trace: [ 1448.348800] [ 1448.348805] dump_stack_lvl+0xfa/0x120 [ 1448.348823] should_fail_ex+0x4d7/0x5e0 [ 1448.348848] _copy_to_user+0x32/0xd0 [ 1448.348865] simple_read_from_buffer+0xe0/0x180 [ 1448.348883] proc_fail_nth_read+0x189/0x270 [ 1448.348903] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1448.348920] ? security_file_permission+0x22/0x90 [ 1448.348936] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1448.348953] vfs_read+0x1eb/0xbe0 [ 1448.348974] ? __pfx_vfs_read+0x10/0x10 [ 1448.348991] ? lock_release+0xc8/0x290 [ 1448.349008] ? __fget_files+0x20d/0x3b0 [ 1448.349030] ksys_read+0x121/0x240 [ 1448.349050] ? __pfx_ksys_read+0x10/0x10 [ 1448.349066] ? fput+0x92/0xd0 [ 1448.349081] do_syscall_64+0xbf/0x360 [ 1448.349095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.349108] RIP: 0033:0x7fef86d9369c [ 1448.349117] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1448.349128] RSP: 002b:00007fef84356170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1448.349140] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fef86d9369c [ 1448.349148] RDX: 000000000000000f RSI: 00007fef843561e0 RDI: 0000000000000004 [ 1448.349155] RBP: 00007fef843561d0 R08: 0000000000000000 R09: 0000000000000000 [ 1448.349162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1448.349170] R13: 00007ffdda9f12ef R14: 00007fef84356300 R15: 0000000000022000 [ 1448.349186] 07:44:57 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @loopback}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 07:44:57 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:44:57 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:44:57 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f0000000000)="2ad5e8ae204d2384f118be071a646a6828a961baa611b3e87caee82777e0d353556886e22cefb0af1b577178762f8a7da072509c6a04a19557383405ef17dac99f18c792bc113175cd1dcba927d8b0f114744a9392c1bca615f32335d4e3abe71f4adf87a3d751015dec3645fde8c8b119e1e8dcb4c219ad0335d2f53b161e36d1002e1135d46357e7564e97c2b50ec6eec38df0bec7e2972bf5a5f4b1ec965d156e65e23d33d8cdcdfdd9672f60d96397836c53d14320f5e884507989bfc20105521fb49a3d3217e312883d5b") syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1448.451737] FAULT_INJECTION: forcing a failure. [ 1448.451737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1448.452728] CPU: 1 UID: 0 PID: 13757 Comm: syz-executor.6 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1448.452762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1448.452772] Call Trace: [ 1448.452776] [ 1448.452781] dump_stack_lvl+0xfa/0x120 [ 1448.452799] should_fail_ex+0x4d7/0x5e0 [ 1448.452821] _copy_from_user+0x30/0xd0 [ 1448.452838] hci_dev_cmd+0x8a/0x980 [ 1448.452856] ? do_raw_spin_lock+0x123/0x260 [ 1448.452872] ? __pfx_hci_dev_cmd+0x10/0x10 [ 1448.452889] ? cap_capable+0xdb/0x3b0 [ 1448.452909] ? security_capable+0x2f/0x90 [ 1448.452928] hci_sock_ioctl+0x493/0x810 [ 1448.452945] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 1448.452960] ? get_pid_task+0x107/0x250 [ 1448.452978] ? proc_fail_nth_write+0x98/0x250 [ 1448.452999] sock_do_ioctl+0xd1/0x240 [ 1448.453019] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1448.453039] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1448.453055] ? do_vfs_ioctl+0x125/0x1470 [ 1448.453070] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1448.453084] ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0 [ 1448.453103] ? __mutex_unlock_slowpath+0xc1/0x650 [ 1448.453115] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1448.453136] sock_ioctl+0x40d/0x630 [ 1448.453149] ? __pfx_sock_ioctl+0x10/0x10 [ 1448.453161] ? lock_release+0xc8/0x290 [ 1448.453177] ? selinux_file_ioctl+0xb9/0x280 [ 1448.453195] ? __pfx_sock_ioctl+0x10/0x10 [ 1448.453208] __x64_sys_ioctl+0x18f/0x210 [ 1448.453223] do_syscall_64+0xbf/0x360 [ 1448.453236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.453249] RIP: 0033:0x7f0179610b19 [ 1448.453267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1448.453278] RSP: 002b:00007f0176b86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1448.453290] RAX: ffffffffffffffda RBX: 00007f0179723f60 RCX: 00007f0179610b19 [ 1448.453298] RDX: 0000000000000000 RSI: 00000000400448dd RDI: 0000000000000005 [ 1448.453305] RBP: 00007f0176b861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1448.453312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1448.453319] R13: 00007ffd354c469f R14: 00007f0176b86300 R15: 0000000000022000 [ 1448.453335] [ 1449.046793] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1449.327407] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1449.328648] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1449.330322] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:45:08 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:45:08 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) r3 = gettid() ioprio_get$pid(0x2, r3) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) r5 = gettid() ioprio_get$pid(0x2, r5) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x1c800, 0x0) bind$bt_hci(r6, &(0x7f00000003c0), 0x6) bind$bt_hci(r6, &(0x7f0000000400)={0x1f, 0x2}, 0x6) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r7, 0xc0603d0f, 0x0) clone3(&(0x7f0000000280)={0x8880000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2f}, &(0x7f00000000c0)=""/44, 0x2c, &(0x7f0000000100)=""/87, &(0x7f0000000240)=[0x0, r2, r3, 0x0, r4, r5], 0x6, {r7}}, 0x58) 07:45:08 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, 0x0, 0x202, 0x0) 07:45:08 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8, 0x0, 0x0, 0x0, 0x80}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:45:08 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x0, 0x0, 0x0) 07:45:08 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x2, 0x0) 07:45:08 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) (fail_nth: 6) 07:45:08 executing program 2: syz_emit_ethernet(0x86, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@ipv4={0x800, @tcp={{0x19, 0x4, 0x0, 0x0, 0x78, 0xffff, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @local, {[@generic={0x83, 0x6, "b19c40c1"}, @timestamp_addr={0x44, 0x14, 0x6a, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x12}}]}, @lsrr={0x83, 0x27, 0x5, [@local, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback, @private=0xa010100, @multicast2, @rand_addr=0x64010101, @broadcast]}, @cipso={0x86, 0xf, 0xffffffffffffffff, [{0x7, 0x9, "acaf48b0e8be30"}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="0000aa0402030600ff0f02000900008027515186bd62c3833d37a13c5b43119c5496c14f4aabb7f8002f4f1f731ab4907837beb298f787a6b40fdd79e5dda69fc1a8bfdfc6e26eeb03a4788712099a6a9f83bd6d9947f6fb6cb78f9dcaf4fb0fbaf2e9aa5272"], 0x66) syz_emit_ethernet(0xfd, &(0x7f0000000000)={@random="7ff069381fe7", @empty, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x2, 0x0, 0x1}, {}, {0x200}, {0x8, 0x0, 0x1}, {0x8c}], @llc={@snap={0x155, 0xab, "86", "3099ca", 0x88f8, "555a51717f0a31483842b4b67f28c1a4652b65a67768ed30306dbc64a97ddcacf46364ea0c578512d49b57053e424e013edfc69e9c2d279c1722f4022e8b9796b68d555b93487962aa8dc1f96262abff93583178e98a6046e855f3beb99048e9bb62758d9370992a7917be010871029a6940088c3c807447999392f663aec8a53513ad0d9ca98d1a3e2b532b5aa678f8a8a91e09f875859faa3ca26511c2c43d5441fe32bcd51ee65bd4c7c336e0f846dde6c294b0339d1704fa2f04e68261f4ef1b65175fe8cd20438e8b8702a900"}}}}}}, &(0x7f0000000140)={0x0, 0x2, [0x69e, 0x5b5, 0xa91, 0x232]}) syz_emit_ethernet(0x243, &(0x7f0000000380)={@remote, @multicast, @void, {@mpls_mc={0x8848, {[{0x8, 0x0, 0x1}, {0x1}], @ipv6=@tcp={0x0, 0x6, "11559f", 0x205, 0x6, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, {[@dstopts={0x84, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0xc0}, @hao={0xc9, 0x10, @loopback}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}, @routing={0x29, 0xa, 0x0, 0x6, 0x0, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @routing={0x32, 0xe, 0x0, 0x4, 0x0, [@remote, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @dev={0xfe, 0x80, '\x00', 0x21}, @local]}, @hopopts={0x84, 0x14, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x81, 0x6}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x81}, @jumbo={0xc2, 0x4, 0xfff}, @calipso={0x7, 0x30, {0x1, 0xa, 0x6, 0x9, [0x3, 0x2, 0x0, 0x10000, 0x2]}}, @calipso={0x7, 0x50, {0x0, 0x12, 0x20, 0x1, [0x100000001, 0x20, 0x7, 0x1, 0x7, 0x0, 0x0, 0x157, 0xffffffff]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0xb, 0xc2, 0x63e7, 0x0, 0x187, {[@exp_smc={0xfe, 0x6}, @mss={0x2, 0x4, 0x2e1}, @timestamp={0x8, 0xa, 0x7, 0x81}, @mss={0x2, 0x4, 0xe4}]}}, {"f611c6a1d16ba751179e3097defdeedaf0d51d18a2138826bda6eee512b321dd0687c331e9bd04e783"}}}}}}}}, &(0x7f0000000100)={0x2, 0x4, [0x287, 0x9ab, 0x5ea, 0xd15]}) 07:45:08 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x0, 0x0, 0x0) [ 1459.647743] FAULT_INJECTION: forcing a failure. [ 1459.647743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1459.649584] CPU: 0 UID: 0 PID: 13784 Comm: syz-executor.6 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1459.649613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1459.649625] Call Trace: [ 1459.649632] [ 1459.649641] dump_stack_lvl+0xfa/0x120 [ 1459.649669] should_fail_ex+0x4d7/0x5e0 [ 1459.649707] _copy_to_user+0x32/0xd0 [ 1459.649735] simple_read_from_buffer+0xe0/0x180 [ 1459.649766] proc_fail_nth_read+0x189/0x270 07:45:08 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) [ 1459.649799] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1459.649832] ? security_file_permission+0x22/0x90 [ 1459.649858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1459.649889] vfs_read+0x1eb/0xbe0 [ 1459.649925] ? __pfx_vfs_read+0x10/0x10 [ 1459.649957] ? lock_release+0xc8/0x290 [ 1459.649984] ? __fget_files+0x20d/0x3b0 [ 1459.650024] ksys_read+0x121/0x240 [ 1459.650062] ? __pfx_ksys_read+0x10/0x10 [ 1459.650093] ? fput+0x92/0xd0 [ 1459.650119] do_syscall_64+0xbf/0x360 [ 1459.650144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.650165] RIP: 0033:0x7f01795c369c [ 1459.650182] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1459.650202] RSP: 002b:00007f0176b86170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1459.650222] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f01795c369c [ 1459.650237] RDX: 000000000000000f RSI: 00007f0176b861e0 RDI: 0000000000000004 [ 1459.650250] RBP: 00007f0176b861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1459.650262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1459.650275] R13: 00007ffd354c469f R14: 00007f0176b86300 R15: 0000000000022000 [ 1459.650304] [ 1459.678688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.698673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.717897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:45:08 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:45:08 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, 0x0, 0x202, 0x0) 07:45:08 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4b47, 0x0) 07:45:08 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@val={0x9100, 0x1, 0x0, 0x2}, {0x8100, 0x5, 0x1, 0x3}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local, @loopback, @remote, @mcast1}}}}, &(0x7f0000000140)={0x0, 0x8000002, [0x3d7, 0x3e, 0x958, 0xe96]}) 07:45:09 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:45:09 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) 07:45:09 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf0, 0x0, 0x0, 0x0) [ 1460.465849] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1460.467570] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:45:18 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) r2 = getpgrp(0x0) epoll_create(0x9) syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x200) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x2, 0x4, 0x200800000000000, 0xfa83, r2}) 07:45:18 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, 0x0, 0x202, 0x0) 07:45:18 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:45:18 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x332, &(0x7f0000000140)={@multicast, @empty, @void, {@mpls_uc={0x8847, {[{0x8000}, {0x6}, {0x80000}, {}, {0x20}], @ipv6=@dccp_packet={0x9, 0x6, "107334", 0x2e8, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, @empty, {[@srh={0x2c, 0x4, 0x4, 0x2, 0x4, 0x8, 0x7, [@local, @mcast2]}, @fragment={0x1d, 0x0, 0x3f, 0x0, 0x0, 0x8, 0x65}, @dstopts={0x8, 0x34, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x1, 0x1, [0x3, 0x1, 0x669, 0x100]}}, @enc_lim={0x4, 0x1, 0xb8}, @pad1, @generic={0x0, 0xc4, "7b7c1c2bfc16b12ad8b81140ba7c65254ea99001f6832db151adcedc0a6a46bd769205944aa71d2b8b4669e077ad03615a60867ae59d3b555a5fb4a6df82c80f14e112d055a4bfa8a438465ba82100ce3f20bfabdf78aa40f2a08865074af5953b7b335f8e3d23a1474dda0e1b839b121e0b0644ffc0cfa3468dc3684f5f2525d6ff8e9e08d082371ab7dd814ca02645823b987e0f832d20092a69ece9f79124e1635f7320c479c7e98e10ed3fa331f50895154ac67e5c3c63ee6a62a62288cb0874d3cf"}, @jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0x80}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x0, 0x9d, "93ea9c973c5e6e45796e93f17fb21a34f1b99972559a33a8ed1163656aeae498c319ab19e164a956200227c139f73b62b14db4ba10c3a5fd00582fe11881e28b7cfcb6b40ae6b2079b5f32cad01d7b275f997ac60108933c141d08864461cd8241ac8234d467494f7e68765d856cc2bf56e99d65502d238060f5123628dea93ca8bcbc777cda9f1fc09ca710766911dfa751732ae33ad05b44bb5342a4"}]}], {{0x4e23, 0x4e23, 0x4, 0x1, 0x9, 0x0, 0x0, 0x1, 0x1, "c2e9e8", 0x3, '<*\v'}, "2873cd2a2cf9d9182fb46e023d98dfd5a557799a89ea88acf743a22aa7512cb8479580516b1241888e32fcffeb05f62d336a9e4309c97c4c9d19aec31144ec5dbebbfb8193cf7b9486f0a635b7c9f64e5e91a04930fe0e50d178ad54a6e510665225ec1939ed185b22f19d2790b57c88a59293c8eb35bce37e4dbdf4cd23dbc85a5a1e49b8a30dcc7461ec85fa5b97e1f920e0dfef800d41dc1d5e76ba61e3e3f6bb7e3b0d1b4c0c12e021cecee463abfb1f7717ae51c3fa3a61e0cd4a4f7d76a63d0fe0efe9f72421e2c6256aa11644c959612438eee9129731a0754064a6ecd97fceebefa7ee356d4b1ba186ac4639a6371014c871b16b"}}}}}}}, &(0x7f0000000000)={0x0, 0x3, [0xcaf, 0xc58, 0x1d9, 0xb16]}) 07:45:18 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x2, 0x0) 07:45:18 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x300, 0x0, 0x0, 0x0) 07:45:18 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4b49, 0x0) 07:45:18 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) [ 1469.593556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:45:18 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040), 0x202, 0x0) 07:45:18 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:45:18 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac2814aaffffffff00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) [ 1469.661347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:45:18 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4b47, 0x0) 07:45:18 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x500, 0x0, 0x0, 0x0) [ 1469.679759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:45:18 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x541b, 0x0) 07:45:18 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040), 0x202, 0x0) 07:45:18 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) [ 1470.451866] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1470.454441] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1470.456147] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:45:29 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x600, 0x0, 0x0, 0x0) 07:45:29 executing program 2: ioctl$sock_proto_private(0xffffffffffffffff, 0x89ec, &(0x7f0000000140)="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") syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'geneve1\x00'}) 07:45:29 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4b49, 0x0) 07:45:29 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040), 0x202, 0x0) 07:45:29 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5421, 0x0) 07:45:29 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:45:29 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x4, 0x1b7, "83790c", 0x9, 0x7}) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) 07:45:29 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) [ 1480.701846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.709652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.714754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.583021] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1481.583169] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1481.584599] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1481.586483] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1481.588534] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1481.589410] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1482.789130] Bluetooth: hci4: command 0x0406 tx timeout [ 1484.837099] Bluetooth: hci4: command 0x0406 tx timeout 07:45:40 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5450, 0x0) 07:45:40 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x700, 0x0, 0x0, 0x0) 07:45:40 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xd) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x4}, 0x6) 07:45:40 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:45:40 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x6, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 07:45:40 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x0, 0x0) 07:45:40 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:45:40 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x541b, 0x0) 07:45:40 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x0, 0x0) [ 1491.180446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:45:40 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) [ 1491.194640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1491.208526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:45:40 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5451, 0x0) 07:45:40 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="6bffb72ac1ef", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@x25={0x805, {0x1, 0x80, 0x9, "295aeb7bb00cf76d4d98758ec091753ce20e5066b692f65c2d"}}}}, &(0x7f0000000040)={0x1, 0x2, [0xf0, 0xbe4, 0x475, 0x8ef]}) [ 1491.992549] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1493.822700] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1493.825795] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1493.830742] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1493.837901] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1493.850816] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1495.909160] Bluetooth: hci6: command tx timeout [ 1497.957212] Bluetooth: hci6: command tx timeout [ 1500.005167] Bluetooth: hci6: command tx timeout [ 1502.053233] Bluetooth: hci6: command tx timeout [ 1510.318657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1510.319881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.397379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1510.398494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:46:09 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x0, 0x0) 07:46:09 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:46:09 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5421, 0x0) 07:46:09 executing program 3: sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x184, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xd4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xc7, 0x3, "1798125369be54086737a13ac83f6ae1c079060f525bb1ed4f6847051ff64a7993f27c62a04e9bb9322f44ddf686ccb38856b1092db08a103d01916d9d63270a0e6a8f557c53086da4f9652510af4c4494c3a5081512b3a10b053345289c080bb4bea21718156c12cb9c92f1493f5b25b17d8da4585028f0572579d3cd3c28f8c1ac16677e42ba830510f72551bc0d90b65d330c818857e998fd67ef3ef52f722d9b7f8870bb593b869c36269e6550396305b3eaa4c577e9b9df116a4716e0df3145c7"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "a879242b863faa144effec11009e73459b357d31fb2beed10f77f063fb8bb1517e74157a"}}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x41}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x6004000}, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x25, 0x1, 0x5fdb7e10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000025c0)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x21e0, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x11}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x3}}, @NL80211_ATTR_SCAN_SUPP_RATES={0x218c, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6b, 0x2, "2bf8afeb5d6a86c9d98d012a2e1946d850522a0d3f72559f30253a5782a23b1de7bd7dead643a65587e6ae7b97ed4ff07a8176c6e7a79148be5ea9f790317b799b7f004cc4c15dc5aa1148a21636eb59b3af8281e0f4f56aa13ad461f5dbc0d85324d8525860c4"}, @NL80211_BAND_6GHZ={0x1004, 0x3, "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"}, @NL80211_BAND_6GHZ={0x1004, 0x3, "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"}, @NL80211_BAND_6GHZ={0x9d, 0x3, "c017ed2d82df3efdbf3ec0b8bc1d1f536173e957187930763b3784eb66f9cb2f6f16021d41966d227d40bf9dd191844bcb9f03b7f52db871b75c5d071d321e8d1c83d239470cdf39cc1723142daef79e492f9cb76dfb289863f47882392577653e438090190aef7e576ceb2b9026da7c71a05b64e6ca79138b0aef83734be619cec422871d614fe969caa1c44ee9e654a3d43fc738f0ed3f03"}, @NL80211_BAND_6GHZ={0x3c, 0x3, "fd555449f829db525f3e3bed52b53bec2932953908d31249924444dae1c46651ca4f0fe26c564c08374c4e111e7636c721972d4d71c37d5d"}, @NL80211_BAND_5GHZ={0x36, 0x1, "ab83d2d94359f5bdf79c021ec1b12caa9a3f02fb24eac40320d36c11ac795cc6c7741831b9d8fabbbb4eeb432b39820c3aef"}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xffffffff}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xe9a9}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3}]}, 0x21e0}, 0x1, 0x0, 0x0, 0x1}, 0x20040001) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) 07:46:09 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac2814aaffffffff00000000", @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB="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"], 0x0) 07:46:09 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5452, 0x0) 07:46:09 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:46:09 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf000, 0x0, 0x0, 0x0) 07:46:09 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5450, 0x0) 07:46:09 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb0ff20, 0x0, 0x0, 0x0) [ 1520.044676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1520.062189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1520.071255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:46:09 executing program 2: ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000000)) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="acaaaaaaaaaaaafc890000f7070045000028f8ffffff00069072ac2814aaffffffff00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) 07:46:09 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:46:09 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5451, 0x0) 07:46:09 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5451, 0x0) 07:46:09 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5460, 0x0) 07:46:09 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc0ff20, 0x0, 0x0, 0x0) 07:46:09 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac2814aaffffffff00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800eb3e246f5cd62ba762f6298bd893a95fd477edd6b7b0a9159bb9480b10e9c5a2ba15d8ecdce12bd9c6e028ed"], 0x0) 07:46:09 executing program 5: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:46:09 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5452, 0x0) [ 1520.925464] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1520.932192] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:46:19 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfffffffffffffffa, 0x80) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 07:46:19 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4b49, 0x0) 07:46:19 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:46:19 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd0ff20, 0x0, 0x0, 0x0) 07:46:19 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8901, 0x0) 07:46:19 executing program 2: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x6, 0xfc, 0xba, 0x7}, {0x1, 0x0, 0x2, 0x5}, {0x0, 0x7, 0x4, 0xfffffffd}]}, 0x10) syz_emit_ethernet(0x53, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa0000000000069078ac2814aaffffffff8900240a010100940000008900940a010100000000000000", @ANYRES32=0x41424344, @ANYRESOCT, @ANYBLOB="5800000090780000"], 0x0) 07:46:19 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:46:19 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x5460, 0x0) [ 1530.334825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1530.341265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1530.345008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:46:19 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8901, 0x0) 07:46:19 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 1) 07:46:19 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf0ffff, 0x0, 0x0, 0x0) 07:46:19 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:46:19 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8902, 0x0) [ 1530.452691] FAULT_INJECTION: forcing a failure. [ 1530.452691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1530.456380] CPU: 1 UID: 0 PID: 14464 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1530.456412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1530.456426] Call Trace: [ 1530.456433] [ 1530.456442] dump_stack_lvl+0xfa/0x120 [ 1530.456472] should_fail_ex+0x4d7/0x5e0 [ 1530.456512] _copy_from_user+0x30/0xd0 [ 1530.456541] get_bitmap+0x12e/0x160 [ 1530.456570] get_nodes+0x158/0x1f0 [ 1530.456595] ? __pfx_get_nodes+0x10/0x10 [ 1530.456620] ? __fget_files+0x20d/0x3b0 [ 1530.456660] kernel_mbind+0x134/0x200 [ 1530.456695] ? __pfx_kernel_mbind+0x10/0x10 [ 1530.456737] do_syscall_64+0xbf/0x360 [ 1530.456763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1530.456787] RIP: 0033:0x7f466f07cb19 [ 1530.456805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1530.456826] RSP: 002b:00007f466c5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1530.456849] RAX: ffffffffffffffda RBX: 00007f466f18ff60 RCX: 00007f466f07cb19 [ 1530.456864] RDX: 0000000000008001 RSI: 0000000000003000 RDI: 0000000020ffa000 [ 1530.456879] RBP: 00007f466c5f21d0 R08: 0000000000000202 R09: 0000000000000000 [ 1530.456892] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 1530.456906] R13: 00007ffc74fe73cf R14: 00007f466c5f2300 R15: 0000000000022000 [ 1530.456936] 07:46:19 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8902, 0x0) 07:46:19 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x0, 0x0, 0x0) 07:46:19 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8903, 0x0) [ 1531.188494] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:46:29 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 2) 07:46:29 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) r2 = open$dir(&(0x7f0000000480)='./file0\x00', 0x551800, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) clone3(&(0x7f0000000400)={0x200000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0, {0x3e}, &(0x7f0000000140)=""/239, 0xef, &(0x7f0000000240)=""/218, &(0x7f00000003c0)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x9, 0x7, 0x8, 0x5e, 0x0, 0x1, 0x10a0, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x1, 0x6}, 0x40405, 0x4, 0x3, 0x6, 0x3ff, 0x1, 0x80, 0x0, 0x19d6}, r3, 0x3, r0, 0x1) 07:46:29 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_emit_ethernet(0xda, &(0x7f0000000000)={@local, @empty, @void, {@x25={0x805, {0x0, 0x3f, 0x6, "d0f8e6550d7c8ecb4e8e386eb61306931ed90574586a30fcfc20ed5b1f4b92b3ee8a990353f0829e01016ab464e91127f89bb1118ef11e038dda867ad26efa9adf7e4fe16c1c25cdecd61b1ed34347ae2d4415dbdda60b472a2931a5295bd2eb016c80dcc5dc03d4efcb450005b3594ea81204b44b21a705be690f1d7b29488c6f8b0010389ab3656e3c7018f24e515611d2fe2af04636f29a1afeea722e4ee7ff187ab3a3b8455b9cde5b6b26ad2b2824da22ca98b432f5e06412bf857e74bcb549e94ff2f1654ecc"}}}}, &(0x7f0000000140)={0x1, 0x3, [0x50, 0xd9e, 0x631, 0x33c]}) 07:46:29 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8904, 0x0) 07:46:29 executing program 5: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:46:29 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x0, 0x0, 0x0) 07:46:29 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8903, 0x0) 07:46:29 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) [ 1540.647354] FAULT_INJECTION: forcing a failure. [ 1540.647354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1540.649304] CPU: 0 UID: 0 PID: 14498 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1540.649334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1540.649347] Call Trace: [ 1540.649354] [ 1540.649363] dump_stack_lvl+0xfa/0x120 [ 1540.649391] should_fail_ex+0x4d7/0x5e0 [ 1540.649428] _copy_from_user+0x30/0xd0 [ 1540.649456] get_bitmap+0x12e/0x160 [ 1540.649483] get_nodes+0x158/0x1f0 [ 1540.649507] ? __pfx_get_nodes+0x10/0x10 [ 1540.649531] ? __fget_files+0x20d/0x3b0 [ 1540.649568] kernel_mbind+0x134/0x200 [ 1540.649601] ? __pfx_kernel_mbind+0x10/0x10 [ 1540.649641] do_syscall_64+0xbf/0x360 [ 1540.649664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.649687] RIP: 0033:0x7f466f07cb19 [ 1540.649704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1540.649724] RSP: 002b:00007f466c5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1540.649746] RAX: ffffffffffffffda RBX: 00007f466f18ff60 RCX: 00007f466f07cb19 [ 1540.649761] RDX: 0000000000008001 RSI: 0000000000003000 RDI: 0000000020ffa000 [ 1540.649774] RBP: 00007f466c5f21d0 R08: 0000000000000202 R09: 0000000000000000 [ 1540.649787] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 1540.649800] R13: 00007ffc74fe73cf R14: 00007f466c5f2300 R15: 0000000000022000 [ 1540.649828] [ 1540.656353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:46:29 executing program 2: syz_emit_ethernet(0xae, &(0x7f00000001c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x23, 0x4, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast, {[@ssrr={0x89, 0xf, 0xaf, [@broadcast, @empty, @multicast2]}, @timestamp_addr={0x44, 0xc, 0xf4, 0x1, 0xa, [{@remote, 0x7}]}, @lsrr={0x83, 0x13, 0x29, [@dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0x3d}, @rand_addr=0x64010100, @rand_addr=0x64010102]}, @ssrr={0x89, 0x1f, 0xce, [@local, @broadcast, @multicast1, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010101]}, @generic={0x7, 0xe, "a7a15c108b5bd351fb2b3db3"}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0xe4, 0x0, 0x0, [0x7fffffff, 0xfffffc01, 0x42a, 0x3, 0xffff]}, @end]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000000)=""/203, 0xcb, 0x40, &(0x7f0000000140)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6}, 0x80) 07:46:29 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 3) [ 1540.747330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:46:29 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x0, 0x0, 0x0) 07:46:29 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8906, 0x0) [ 1540.770436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:46:30 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:46:30 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8904, 0x0) [ 1540.851530] FAULT_INJECTION: forcing a failure. [ 1540.851530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1540.853271] CPU: 1 UID: 0 PID: 14514 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1540.853299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1540.853312] Call Trace: [ 1540.853319] [ 1540.853327] dump_stack_lvl+0xfa/0x120 [ 1540.853355] should_fail_ex+0x4d7/0x5e0 [ 1540.853393] _copy_from_user+0x30/0xd0 [ 1540.853421] get_bitmap+0x12e/0x160 [ 1540.853448] get_nodes+0x158/0x1f0 [ 1540.853472] ? __pfx_get_nodes+0x10/0x10 [ 1540.853495] ? __fget_files+0x20d/0x3b0 [ 1540.853532] kernel_mbind+0x134/0x200 [ 1540.853565] ? __pfx_kernel_mbind+0x10/0x10 [ 1540.853605] do_syscall_64+0xbf/0x360 [ 1540.853628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.853651] RIP: 0033:0x7f466f07cb19 [ 1540.853667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1540.853687] RSP: 002b:00007f466c5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1540.853708] RAX: ffffffffffffffda RBX: 00007f466f18ff60 RCX: 00007f466f07cb19 [ 1540.853722] RDX: 0000000000008001 RSI: 0000000000003000 RDI: 0000000020ffa000 [ 1540.853735] RBP: 00007f466c5f21d0 R08: 0000000000000202 R09: 0000000000000000 [ 1540.853748] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 1540.853761] R13: 00007ffc74fe73cf R14: 00007f466c5f2300 R15: 0000000000022000 [ 1540.853789] 07:46:30 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@can={0xc, {{0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, 'kPQI](\aa'}}}}, &(0x7f0000000040)={0x0, 0x4, [0x8f0, 0x176, 0xb26, 0x3cd]}) 07:46:30 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000000, 0x0, 0x0, 0x0) [ 1541.480409] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:46:40 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 4) 07:46:40 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:46:40 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8907, 0x0) 07:46:40 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x2, 0x4, "619019", 0x80, 0x4}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0x2, 0x2, "cdadbc", 0xff, 0x5}) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) 07:46:40 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:46:40 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8906, 0x0) 07:46:40 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x1, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast, {[@generic={0x0, 0xc, "95d3534ad8ad5b16c758"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80}}}}}}, 0x0) syz_emit_ethernet(0x1ac, &(0x7f0000000140)={@link_local, @multicast, @void, {@mpls_mc={0x8848, {[{0x5, 0x0, 0x1}], @ipv4=@igmp={{0x2e, 0x4, 0x0, 0x20, 0x19a, 0x68, 0x0, 0x3f, 0x2, 0x0, @multicast1, @broadcast, {[@timestamp_prespec={0x44, 0x3c, 0xff, 0x3, 0x7, [{@private=0xa010100, 0x1}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@broadcast, 0x40}, {@rand_addr=0x64010102, 0x7fffffff}, {@local, 0x7}, {@local, 0xfffffffb}]}, @timestamp_addr={0x44, 0x3c, 0xa4, 0x1, 0x0, [{@multicast2, 0x6}, {@broadcast, 0x8}, {@loopback, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x25}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x200}, {@multicast2, 0xe66}]}, @timestamp_addr={0x44, 0x24, 0x92, 0x1, 0x2, [{@multicast1, 0xffffff81}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xffffff00}, {@local, 0x1f}, {@rand_addr=0x64010102, 0x4}]}, @noop, @timestamp_prespec={0x44, 0x4, 0x44, 0x3, 0x5}]}}, {0x1f, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, "c918c637b4ccb6d071623a7da1c1f22625b01c961d5919ae641abe776d7768bac89648aeb177ce227c5e9836ba3ef7295b44f68a9199fac708f66a8307d751143253e83db53bbb0d2ca695d61d31a9d7cffb8af81ba66f36d87def335ea0e297c5e800c1e048912a99febe387c5e9e9c4b83816f91baf067ca5f28bf5b8dc5b28b35a643061f556f1fcd4e83dbb5ef021a7f01b63afcf445e500f0f4c067dfd4ba98204b6c6ad3919a1de7c30cb71363dd657c4b895551a9d580e4cf855fa2b5df913b607660a4de2929b90e03689368c822e8c06ce29adf3af4"}}}}}}, &(0x7f0000000300)={0x1, 0x4, [0x8cf, 0x81, 0x9c3, 0xca8]}) syz_emit_ethernet(0x72, &(0x7f0000000000)={@multicast, @empty, @void, {@llc={0x4, {@snap={0xff, 0x1, "4ad8", "7ca771", 0x890d, "90053a53115353f7856bb6a73fbc7307bc49336a5d2d306ca502b17d958e93e8a273dfe204cefef49d6e4af382a5814c6a6de6a6c90adaab280cb58a0efedc77a00538e7dfa962dfd26fd299fa41e017604b8f0f6d09eb70706ee4"}}}}}, &(0x7f0000000100)={0x0, 0x1, [0x51a, 0x7e2, 0xa3d, 0x296]}) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @val={@val={0x9100, 0x3, 0x1, 0x4}, {0x8100, 0x6, 0x1, 0x3}}, {@canfd={0xd, {{0x0, 0x1, 0x1}, 0xc, 0x2, 0x0, 0x0, "92ad88006495ac1bfe2ff3a7ac5f172ce2dad690754b42ea1d383a22430ee837ce26b1f3cbc4525645e3b8d1e30f925c6e572095da6653fe40552aa5747b72a9"}}}}, &(0x7f00000003c0)={0x1, 0x1, [0x437, 0x3a6, 0x6d6, 0x4ca]}) 07:46:40 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5000000, 0x0, 0x0, 0x0) [ 1551.631322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1551.638826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1551.645583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:46:40 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6000000, 0x0, 0x0, 0x0) [ 1551.677535] FAULT_INJECTION: forcing a failure. [ 1551.677535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1551.679341] CPU: 1 UID: 0 PID: 14552 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1551.679370] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1551.679383] Call Trace: [ 1551.679390] [ 1551.679399] dump_stack_lvl+0xfa/0x120 [ 1551.679427] should_fail_ex+0x4d7/0x5e0 [ 1551.679465] _copy_from_user+0x30/0xd0 [ 1551.679493] get_bitmap+0x12e/0x160 [ 1551.679521] get_nodes+0x158/0x1f0 [ 1551.679545] ? __pfx_get_nodes+0x10/0x10 [ 1551.679568] ? __fget_files+0x20d/0x3b0 [ 1551.679606] kernel_mbind+0x134/0x200 [ 1551.679639] ? __pfx_kernel_mbind+0x10/0x10 [ 1551.679678] do_syscall_64+0xbf/0x360 [ 1551.679702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.679725] RIP: 0033:0x7f466f07cb19 [ 1551.679741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1551.679761] RSP: 002b:00007f466c5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1551.679782] RAX: ffffffffffffffda RBX: 00007f466f18ff60 RCX: 00007f466f07cb19 [ 1551.679796] RDX: 0000000000008001 RSI: 0000000000003000 RDI: 0000000020ffa000 [ 1551.679809] RBP: 00007f466c5f21d0 R08: 0000000000000202 R09: 0000000000000000 [ 1551.679822] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 1551.679835] R13: 00007ffc74fe73cf R14: 00007f466c5f2300 R15: 0000000000022000 [ 1551.679863] 07:46:40 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7000000, 0x0, 0x0, 0x0) 07:46:40 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8912, 0x0) 07:46:40 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:46:40 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 5) 07:46:41 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8907, 0x0) 07:46:41 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1551.853213] FAULT_INJECTION: forcing a failure. [ 1551.853213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1551.856601] CPU: 1 UID: 0 PID: 14569 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1551.856632] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1551.856644] Call Trace: [ 1551.856651] [ 1551.856659] dump_stack_lvl+0xfa/0x120 [ 1551.856688] should_fail_ex+0x4d7/0x5e0 [ 1551.856725] _copy_from_user+0x30/0xd0 [ 1551.856753] get_bitmap+0x12e/0x160 [ 1551.856780] get_nodes+0x158/0x1f0 [ 1551.856804] ? __pfx_get_nodes+0x10/0x10 [ 1551.856828] ? __fget_files+0x20d/0x3b0 [ 1551.856865] kernel_mbind+0x134/0x200 [ 1551.856898] ? __pfx_kernel_mbind+0x10/0x10 [ 1551.856937] do_syscall_64+0xbf/0x360 [ 1551.856961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.856983] RIP: 0033:0x7f466f07cb19 [ 1551.857000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1551.857020] RSP: 002b:00007f466c5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1551.857049] RAX: ffffffffffffffda RBX: 00007f466f18ff60 RCX: 00007f466f07cb19 [ 1551.857064] RDX: 0000000000008001 RSI: 0000000000003000 RDI: 0000000020ffa000 [ 1551.857077] RBP: 00007f466c5f21d0 R08: 0000000000000202 R09: 0000000000000000 [ 1551.857090] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 1551.857102] R13: 00007ffc74fe73cf R14: 00007f466c5f2300 R15: 0000000000022000 [ 1551.857131] 07:46:41 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8940, 0x0) 07:46:41 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) [ 1552.507267] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1552.508699] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1552.509727] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1552.511454] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:46:52 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:46:52 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x20ffb000, 0x0, 0x0, 0x0) 07:46:52 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8912, 0x0) [ 1563.167272] FAULT_INJECTION: forcing a failure. [ 1563.167272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1563.169137] CPU: 1 UID: 0 PID: 14587 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1563.169165] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1563.169177] Call Trace: [ 1563.169184] [ 1563.169192] dump_stack_lvl+0xfa/0x120 [ 1563.169219] should_fail_ex+0x4d7/0x5e0 [ 1563.169256] _copy_from_user+0x30/0xd0 [ 1563.169283] get_bitmap+0x12e/0x160 [ 1563.169310] get_nodes+0x158/0x1f0 [ 1563.169334] ? __pfx_get_nodes+0x10/0x10 [ 1563.169357] ? __fget_files+0x20d/0x3b0 [ 1563.169394] kernel_mbind+0x134/0x200 [ 1563.169426] ? __pfx_kernel_mbind+0x10/0x10 [ 1563.169465] do_syscall_64+0xbf/0x360 [ 1563.169488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.169510] RIP: 0033:0x7f466f07cb19 07:46:52 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 6) 07:46:52 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"0b5ebcb27bd84fe7a79a276a6579921a", 0x0, 0x0, {0x0, 0x400}, {0x4, 0x8}, 0x8, [0x6, 0x16, 0x0, 0x3, 0x5, 0x7, 0x1000, 0x9, 0x9, 0x6, 0xff, 0x8001, 0x9cf, 0x8, 0x7, 0x8]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000001c0)={{r1}, r2, 0x2, @inherit={0x60, &(0x7f0000000140)={0x1, 0x3, 0x1f, 0x3f0000000, {0x0, 0x81, 0x1000, 0x4, 0x1ff}, [0x2, 0x401, 0x7fffffff]}}, @subvolid=0x1000}) syz_emit_ethernet(0x24e, &(0x7f0000001440)={@local, @dev, @val={@void, {0x8100, 0x7, 0x0, 0x3}}, {@ipv4={0x800, @gre={{0x1c, 0x4, 0x1, 0x6, 0x23c, 0x68, 0x0, 0xf7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0xb, 0x50, [@private=0xa010101, @local]}, @timestamp_addr={0x44, 0x4, 0x3c, 0x1, 0xe}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0xfd, [@dev={0xac, 0x14, 0x14, 0x36}, @empty, @multicast2, @broadcast]}, @timestamp_addr={0x44, 0x34, 0xc3, 0x1, 0x1, [{@private=0xa010101, 0xfffffffa}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x899e}, {@remote, 0x2ca32743}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@empty, 0x1}, {@broadcast, 0x7f}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x47, 0x1, [], "aef978a6fdffd09891972c66607a261f53c171aeeb4e894daa064eef3366d5919c5d8e1669d1e8f2e05e51e2cc9bfcf3d369c835c6c9d7e28c5e6215ba6760eb627c70026c7531"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x81, 0x7], "f807f05da66842a481642a9b0ceb605f9cdc48413f1c36f3c47aadb7961c3b4b240e2e269586985facca24d004266c081c75de9b0a47a178186dfe50e702db11dcb116710bd408f9e7e3104070ea28e06b32182003a9aafb9e94f83ff0658607aea47f590c04af7a76493c6ebfff5b8b88f748d8f631ecabeaec40ae6be026971cf6a88927567c8b189c6c4b8527d5066eb5d5afa3bcbb8089021cc994a33842818028c421a0ddc37c0fea7084d4ef63464fa954bbefc0c5d1bec9a481"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "3778c8fc581948f837e7d4d99451dbd5b7bbab5e1dc2b3a8b9816383cbc6d7d131f389aa8bfe0915706d2faebd05990d7fbeead1f6095c3a632a881755171d2b05329312841afc1b890794c19aa965b849208d"}, {0x8, 0x88be, 0x0, {{0x6, 0x1, 0x6, 0x2, 0x0, 0x1, 0x5, 0x12}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x2, {{0x8, 0x2, 0x5, 0x2, 0x0, 0x0, 0x1, 0x5f}, 0x2, {0x7fffffff, 0x6, 0x1, 0xf, 0x0, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "b0f674d39923a096cc359e2b140abf3ffb388318c0158ad99e86a871d231876581e158d307f6a3abb15f751033"}}}}}}, 0x0) 07:46:52 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="30b619d48548867a081ec2ed880c686b2fee530b54b69bc894c2394f0b48567943e619bb3753ab149ea31a7c88bdc5011c3e76a849281416b8bb1d54f5894cb18fc1788b7b90277785a836d546ce9a05981dd6c7a4ee578da4765ae7219b1b2e602726a1976b403d7feb57e3c72118af5b7cadb0deaf6a069373cebb5e4c113aa8aaf3cf9bf16683d661f9f081b5f338566c1b011c47bdee03e1ce5dbac9391ea06cc2326a5c2bf1f125ccc2eb922a8b6b33da62f47a4f6883d89b7b586602391ce17b9d567a23012e912085ba11278722dd4ec2c716ae5cd88317b718dde7a9892542c43986cdc489ad8814c4a922ee0dd1cec042398b3c5b587e6c6d9c748253594cbbaa26861ee41de2bcc48ca2247e006deffc8fda87ee1a381df52e267f1367e871c6098182fd0780c75a471fd6b139d729b0eab8538e6c3619a4ae23513e9d17719f2ce7cfcce7abff61aac656c68cdef06928e62e7baf45fdf492cb8419a4ff239b70e352f2e5b09b4bbd521d6d586fc8bff2e46e66a77377d309489e4f4b791622fbb704ff6a18ffdfcd9166086a54a9eaee49c74d9713f3843142ef314b665571b3a8400ca93139d0d6cb839a1b0b46efa13f5dac91e014fb5727862e5284b61dcf73217ee2ed5c8d32765ae2a23e90fb6cf778be6ebe561a583b9bb6932d61143baf2f1864dc2350bdfe61587599de3d4a2bb6c501d3e4cc2017b106499e10dee2515bcc540d7665b15972925f10f27067dd599e847fddd257609db34d23857946b92cf29a4b8dbfd16c301663de9adb6ed8405a8685ad3e847cea97328f40efb8788de95cb71adcabe40631e9e82d30d048ec586bc4af2348d8f70ddf606339f0a3ef4d3e9ccd0a5dfdfb726daf53da373877142b35bce3a13695048614a61b6a0782128123fb35990b64dcc5f4c33f361270c01cbf0e892c7f212881f6d03a1165cf70846c59c21e36db0d08120a43c8414db6669053d4ec052baac1bca2b130dfbf490475a73514068202db02636588d607954d9e4ba99e6d1f05d672d98261f0cddab85e3f0b0d909108d29549a9d22ab310e6c296ec89db9ecd1aa7033b683c1cdb92c4be76f6ac82e4e0ab938b2e"}, 0x354) 07:46:52 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8941, 0x0) 07:46:52 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8081, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) [ 1563.169526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1563.169546] RSP: 002b:00007f466c5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1563.169566] RAX: ffffffffffffffda RBX: 00007f466f18ff60 RCX: 00007f466f07cb19 [ 1563.169581] RDX: 0000000000008001 RSI: 0000000000003000 RDI: 0000000020ffa000 [ 1563.169593] RBP: 00007f466c5f21d0 R08: 0000000000000202 R09: 0000000000000000 [ 1563.169606] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 1563.169619] R13: 00007ffc74fe73cf R14: 00007f466c5f2300 R15: 0000000000022000 [ 1563.169647] 07:46:52 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 7) [ 1563.250721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1563.264520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1563.280305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1563.305574] FAULT_INJECTION: forcing a failure. [ 1563.305574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1563.307225] CPU: 1 UID: 0 PID: 14606 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1563.307252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1563.307263] Call Trace: [ 1563.307271] [ 1563.307278] dump_stack_lvl+0xfa/0x120 [ 1563.307305] should_fail_ex+0x4d7/0x5e0 [ 1563.307341] _copy_from_user+0x30/0xd0 [ 1563.307367] get_bitmap+0x12e/0x160 [ 1563.307393] get_nodes+0x158/0x1f0 [ 1563.307415] ? __pfx_get_nodes+0x10/0x10 [ 1563.307437] ? __fget_files+0x20d/0x3b0 [ 1563.307473] kernel_mbind+0x134/0x200 [ 1563.307503] ? __pfx_kernel_mbind+0x10/0x10 [ 1563.307540] do_syscall_64+0xbf/0x360 [ 1563.307562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.307583] RIP: 0033:0x7f466f07cb19 [ 1563.307599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1563.307618] RSP: 002b:00007f466c5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1563.307637] RAX: ffffffffffffffda RBX: 00007f466f18ff60 RCX: 00007f466f07cb19 [ 1563.307651] RDX: 0000000000008001 RSI: 0000000000003000 RDI: 0000000020ffa000 [ 1563.307663] RBP: 00007f466c5f21d0 R08: 0000000000000202 R09: 0000000000000000 [ 1563.307676] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 1563.307688] R13: 00007ffc74fe73cf R14: 00007f466c5f2300 R15: 0000000000022000 [ 1563.307715] 07:46:52 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8940, 0x0) 07:46:52 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x20ffc000, 0x0, 0x0, 0x0) 07:46:52 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) [ 1564.086231] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1564.095802] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1564.098344] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1564.101078] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1564.102892] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:47:02 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 8) 07:47:02 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x894c, 0x0) 07:47:02 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, 0x0, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:47:02 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8941, 0x0) 07:47:02 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x20ffd000, 0x0, 0x0, 0x0) 07:47:02 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:47:02 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3, 0x4}, 0x6) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) write$bt_hci(r0, &(0x7f0000000080)={0x1, @le_del_from_resolv_list={{0x2028, 0x7}, {0x3f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0xb) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) 07:47:02 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, r0, &(0x7f0000000100)=0x80, &(0x7f0000000240)=@qipcrtr, 0x0, 0x80800, 0x1}, 0x80000000) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000200)={0x7ff, 0x20, 0x0, 0x8, 0x1, [0x7, 0x9]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x80108906, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x14, 0x17, {0xb, 0x100, @l2={'eth', 0x3a, 'nr0\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac2814aaffffffff00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000987800006d6cd42fbd8d7cce0300e656288ce246aa9d2577e7dd8eb65ded0bb49a53b5a8f0137cc59784c0552ced2a8b870c9f47a8e4d43b9306723bdec4480a18992e77314e9a565e431055b1803e5a9caa998832870af15e413235de324a94ac9a52db8dc788ef952ec0098a3fc97f6ca09248ed0a41961b5d9534f8e118929e5b0339713457cc28eb4ebc83a7de8e38f34502854ec142dfae95c21d6700"/173], 0x0) [ 1572.893158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1572.897516] FAULT_INJECTION: forcing a failure. [ 1572.897516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1572.899633] CPU: 1 UID: 0 PID: 14639 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1572.899668] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1572.899684] Call Trace: [ 1572.899692] [ 1572.899702] dump_stack_lvl+0xfa/0x120 [ 1572.899735] should_fail_ex+0x4d7/0x5e0 [ 1572.899780] _copy_from_user+0x30/0xd0 [ 1572.899814] get_bitmap+0x12e/0x160 [ 1572.899847] get_nodes+0x158/0x1f0 [ 1572.899876] ? __pfx_get_nodes+0x10/0x10 [ 1572.899904] ? __fget_files+0x20d/0x3b0 [ 1572.899950] kernel_mbind+0x134/0x200 [ 1572.899989] ? __pfx_kernel_mbind+0x10/0x10 [ 1572.900044] do_syscall_64+0xbf/0x360 [ 1572.900073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.900100] RIP: 0033:0x7f466f07cb19 [ 1572.900120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1572.900145] RSP: 002b:00007f466c5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1572.900170] RAX: ffffffffffffffda RBX: 00007f466f18ff60 RCX: 00007f466f07cb19 [ 1572.900187] RDX: 0000000000008001 RSI: 0000000000003000 RDI: 0000000020ffa000 [ 1572.900204] RBP: 00007f466c5f21d0 R08: 0000000000000202 R09: 0000000000000000 [ 1572.900220] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 1572.900236] R13: 00007ffc74fe73cf R14: 00007f466c5f2300 R15: 0000000000022000 [ 1572.900270] [ 1572.900341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:47:02 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffff000, 0x0, 0x0, 0x0) 07:47:02 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8982, 0x0) [ 1572.966082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:47:02 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, 0x0, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:47:02 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 9) 07:47:02 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb0ff2000000000, 0x0, 0x0, 0x0) [ 1573.076588] FAULT_INJECTION: forcing a failure. [ 1573.076588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1573.078730] CPU: 1 UID: 0 PID: 14664 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1573.078761] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1573.078775] Call Trace: [ 1573.078783] [ 1573.078791] dump_stack_lvl+0xfa/0x120 [ 1573.078821] should_fail_ex+0x4d7/0x5e0 [ 1573.078862] _copy_from_user+0x30/0xd0 [ 1573.078892] get_bitmap+0x12e/0x160 [ 1573.078921] get_nodes+0x1c7/0x1f0 [ 1573.078946] ? __pfx_get_nodes+0x10/0x10 [ 1573.078971] ? __fget_files+0x20d/0x3b0 [ 1573.079012] kernel_mbind+0x134/0x200 [ 1573.079055] ? __pfx_kernel_mbind+0x10/0x10 [ 1573.079097] do_syscall_64+0xbf/0x360 [ 1573.079123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.079147] RIP: 0033:0x7f466f07cb19 [ 1573.079165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1573.079188] RSP: 002b:00007f466c5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1573.079210] RAX: ffffffffffffffda RBX: 00007f466f18ff60 RCX: 00007f466f07cb19 [ 1573.079226] RDX: 0000000000008001 RSI: 0000000000003000 RDI: 0000000020ffa000 [ 1573.079240] RBP: 00007f466c5f21d0 R08: 0000000000000202 R09: 0000000000000000 [ 1573.079255] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 1573.079269] R13: 00007ffc74fe73cf R14: 00007f466c5f2300 R15: 0000000000022000 [ 1573.079299] 07:47:02 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x894c, 0x0) 07:47:02 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8983, 0x0) [ 1573.748205] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1573.750476] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1573.752490] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1573.754747] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1576.180416] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1576.185935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1576.188820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1576.197535] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1576.202121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1578.213469] Bluetooth: hci2: command tx timeout [ 1580.261165] Bluetooth: hci2: command tx timeout [ 1582.309160] Bluetooth: hci2: command tx timeout [ 1584.357128] Bluetooth: hci2: command tx timeout [ 1592.552199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1592.553642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1592.586121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1592.587310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1593.785951] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1593.787710] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:47:32 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc0ff2000000000, 0x0, 0x0, 0x0) 07:47:32 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 10) 07:47:32 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000040)={0x4c4b, 0x9, 0x1, 0x4, 0x7, [{0x9, 0x8, 0xe7f, '\x00', 0x886}, {0x0, 0x0, 0x80000001, '\x00', 0x8}, {0x7fff, 0x8, 0x1, '\x00', 0x2008}, {0x8000, 0x2, 0x401, '\x00', 0x700}, {0x8, 0x6, 0x1, '\x00', 0x200}, {0x7f, 0xfffffffffffffff9, 0x3, '\x00', 0x80}, {0x4, 0xf4a, 0x3, '\x00', 0x400}]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 07:47:32 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8982, 0x0) 07:47:32 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a0, 0x0) 07:47:32 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0x0, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="30b619d48548867a081ec2ed880c686b2fee530b54b69bc894c2394f0b48567943e619bb3753ab149ea31a7c88bdc5011c3e76a849281416b8bb1d54f5894cb18fc1788b7b90277785a836d546ce9a05981dd6c7a4ee578da4765ae7219b1b2e602726a1976b403d7feb57e3c72118af5b7cadb0deaf6a069373cebb5e4c113aa8aaf3cf9bf16683d661f9f081b5f338566c1b011c47bdee03e1ce5dbac9391ea06cc2326a5c2bf1f125ccc2eb922a8b6b33da62f47a4f6883d89b7b586602391ce17b9d567a23012e912085ba11278722dd4ec2c716ae5cd88317b718dde7a9892542c43986cdc489ad8814c4a922ee0dd1cec042398b3c5b587e6c6d9c748253594cbbaa26861ee41de2bcc48ca2247e006deffc8fda87ee1a381df52e267f1367e871c6098182fd0780c75a471fd6b139d729b0eab8538e6c3619a4ae23513e9d17719f2ce7cfcce7abff61aac656c68cdef06928e62e7baf45fdf492cb8419a4ff239b70e352f2e5b09b4bbd521d6d586fc8bff2e46e66a77377d309489e4f4b791622fbb704ff6a18ffdfcd9166086a54a9eaee49c74d9713f3843142ef314b665571b3a8400ca93139d0d6cb839a1b0b46efa13f5dac91e014fb5727862e5284b61dcf73217ee2ed5c8d32765ae2a23e90fb6cf778be6ebe561a583b9bb6932d61143baf2f1864dc2350bdfe61587599de3d4a2bb6c501d3e4cc2017b106499e10dee2515bcc540d7665b15972925f10f27067dd599e847fddd257609db34d23857946b92cf29a4b8dbfd16c301663de9adb6ed8405a8685ad3e847cea97328f40efb8788de95cb71adcabe40631e9e82d30d048ec586bc4af2348d8f70ddf606339f0a3ef4d3e9ccd0a5dfdfb726daf53da373877142b35bce3a13695048614a61b6a0782128123fb35990b64dcc5f4c33f361270c01cbf0e892c7f212881f6d03a1165cf70846c59c21e36db0d08120a43c8414db6669053d4ec052baac1bca2b130dfbf490475a73514068202db02636588d607954d9e4ba99e6d1f05d672d98261f0cddab85e3f0b0d909108d29549a9d22ab310e6c296ec89db9ecd1aa7033b683c1cdb92c4be76f6ac82e4e0ab938b2e"}, 0x354) 07:47:32 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, 0x0, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:47:32 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000040)={@multicast, @dev, @val={@val={0x9100, 0x7, 0x0, 0x4}, {0x8100, 0x2, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1602.871455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1602.872655] FAULT_INJECTION: forcing a failure. [ 1602.872655] name failslab, interval 1, probability 0, space 0, times 0 [ 1602.873582] CPU: 0 UID: 0 PID: 15150 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1602.873598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1602.873606] Call Trace: [ 1602.873611] [ 1602.873616] dump_stack_lvl+0xfa/0x120 [ 1602.873636] should_fail_ex+0x4d7/0x5e0 [ 1602.873661] ? mpol_new+0x117/0x2e0 [ 1602.873677] should_failslab+0xc2/0x120 [ 1602.873689] kmem_cache_alloc_noprof+0x5f/0x470 [ 1602.873706] ? __lock_acquire+0xc65/0x1b70 [ 1602.873724] mpol_new+0x117/0x2e0 [ 1602.873738] do_mbind+0x1c6/0xd70 [ 1602.873756] ? find_held_lock+0x2b/0x80 [ 1602.873772] ? __might_fault+0x138/0x190 [ 1602.873786] ? __pfx_do_mbind+0x10/0x10 [ 1602.873802] ? __might_fault+0xe0/0x190 [ 1602.873819] ? get_bitmap+0xea/0x160 [ 1602.873833] ? get_nodes+0x17c/0x1f0 [ 1602.873845] ? __pfx_get_nodes+0x10/0x10 [ 1602.873858] ? __fget_files+0x20d/0x3b0 [ 1602.873879] kernel_mbind+0x1e7/0x200 [ 1602.873897] ? __pfx_kernel_mbind+0x10/0x10 [ 1602.873915] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1602.873937] do_syscall_64+0xbf/0x360 [ 1602.873951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.873964] RIP: 0033:0x7f466f07cb19 [ 1602.873974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1602.873986] RSP: 002b:00007f466c5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1602.873998] RAX: ffffffffffffffda RBX: 00007f466f18ff60 RCX: 00007f466f07cb19 [ 1602.874007] RDX: 0000000000008001 RSI: 0000000000003000 RDI: 0000000020ffa000 [ 1602.874014] RBP: 00007f466c5f21d0 R08: 0000000000000202 R09: 0000000000000000 [ 1602.874022] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 1602.874033] R13: 00007ffc74fe73cf R14: 00007f466c5f2300 R15: 0000000000022000 [ 1602.874049] [ 1602.894201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1602.901892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:47:32 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd0ff2000000000, 0x0, 0x0, 0x0) 07:47:32 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 07:47:32 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040), 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:47:32 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa04400808450000280000000000069078ac2814aaffffffa611000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xb, @broadcast, @rand_addr=0x64010100, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @dev={0xac, 0x14, 0x14, 0x3d}}}}}, &(0x7f0000000040)={0x0, 0x4, [0x811, 0x73b, 0xe04, 0x26d]}) 07:47:32 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 11) 07:47:32 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8983, 0x0) 07:47:32 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040), 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:47:32 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf0ffffffffffff, 0x0, 0x0, 0x0) 07:47:32 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @remote, @void, {@llc_tr={0x11, {@snap={0x1, 0x1, "e2", "37802c", 0xa01, "f54db9df6015c760c398bc8df62494b6ebc26c6e76ed597ae8bbf61bb6a4e1868aecf32da81280d4c9534916c2c6909c8b4a42fde064b1198dde4e2056da8abb8a2ee15362a9a731f91b8c8d83c581d25906a37504ce861c"}}}}}, &(0x7f0000000080)={0x1, 0x1, [0x176, 0x4cc, 0xf40, 0xeb3]}) 07:47:32 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a3, 0x0) [ 1603.794819] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1603.796973] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:47:41 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0x0, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:47:41 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a0, 0x0) 07:47:41 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040), 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:47:41 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000000000000, 0x0, 0x0, 0x0) 07:47:41 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0xecc) r1 = getpgid(0xffffffffffffffff) pread64(r0, &(0x7f0000000000)=""/190, 0xbe, 0x4) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000001c0)={0x0, r1}) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000000000400000000000000069078ac2814aafffffffa8eff00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="f8ff4da3213244b1"], 0x0) 07:47:41 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 12) 07:47:41 executing program 3: io_setup(0x9, &(0x7f0000000000)=0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r0, 0x2, &(0x7f0000000240)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x6, 0xb, r1, &(0x7f0000000080)="ccf85f557423fa40116e97ebf6c029ed6406e4e2ebadb2b7206e3a2cddf6ce11b02c1ec3141055a458c5db50e0f489f41556ed8c1ab9f9a5e9d36cdda5f5b93ece34267dd474980c70d5f27433eef137eb9d7cbdf5178802e27ba2c2fe7cb7ac8819a1b47cd945f87110d7ef55eda2d62d36565f6cdf941ecceaf1c2807370b434d29cb2ca751dad62aada81d1c3d305f15ed7", 0x93, 0x5, 0x0, 0x1, r2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)="7f7137abc1721ad540d3192cfc516a98ea70deb8493445d609965cd8d6700aba38768eb697663e7cc8618f90499ae65b64548d7747f1b748a758d74ad6e5", 0x3e, 0x7fffffff, 0x0, 0x2, r4}]) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448c9, 0x0) tee(r3, r5, 0x5, 0x0) 07:47:41 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) [ 1611.870984] FAULT_INJECTION: forcing a failure. [ 1611.870984] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.871934] CPU: 1 UID: 0 PID: 15204 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1611.871950] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1611.871957] Call Trace: [ 1611.871962] [ 1611.871967] dump_stack_lvl+0xfa/0x120 [ 1611.871984] should_fail_ex+0x4d7/0x5e0 [ 1611.872006] ? vm_area_dup+0x25/0x6f0 [ 1611.872018] should_failslab+0xc2/0x120 [ 1611.872035] kmem_cache_alloc_noprof+0x5f/0x470 [ 1611.872054] ? __pfx_mt_find+0x10/0x10 [ 1611.872069] vm_area_dup+0x25/0x6f0 [ 1611.872081] __split_vma+0x179/0xde0 [ 1611.872099] ? __pfx___split_vma+0x10/0x10 [ 1611.872114] ? mas_prev_setup.constprop.0+0xb7/0x9e0 [ 1611.872129] ? __mpol_equal+0xb0/0x330 [ 1611.872148] ? can_vma_merge_right+0xa5/0x440 [ 1611.872165] vma_modify+0x16fb/0x2030 [ 1611.872184] ? __pfx_vma_modify+0x10/0x10 [ 1611.872204] vma_modify_policy+0x1b0/0x250 [ 1611.872220] ? __pfx_vma_modify_policy+0x10/0x10 [ 1611.872247] mbind_range+0x17a/0x570 [ 1611.872266] do_mbind+0x7b4/0xd70 [ 1611.872286] ? __pfx_do_mbind+0x10/0x10 [ 1611.872302] ? __might_fault+0xe0/0x190 [ 1611.872323] ? __pfx_get_nodes+0x10/0x10 [ 1611.872341] kernel_mbind+0x1e7/0x200 [ 1611.872359] ? __pfx_kernel_mbind+0x10/0x10 [ 1611.872377] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1611.872399] do_syscall_64+0xbf/0x360 [ 1611.872413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.872425] RIP: 0033:0x7f466f07cb19 [ 1611.872434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1611.872446] RSP: 002b:00007f466c5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1611.872457] RAX: ffffffffffffffda RBX: 00007f466f18ff60 RCX: 00007f466f07cb19 [ 1611.872465] RDX: 0000000000008001 RSI: 0000000000003000 RDI: 0000000020ffa000 [ 1611.872473] RBP: 00007f466c5f21d0 R08: 0000000000000202 R09: 0000000000000000 [ 1611.872480] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 1611.872488] R13: 00007ffc74fe73cf R14: 00007f466c5f2300 R15: 0000000000022000 [ 1611.872503] [ 1611.895018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1611.900403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1611.902021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:47:41 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 13) 07:47:41 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000000000000, 0x0, 0x0, 0x0) 07:47:41 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 14) 07:47:41 executing program 2: syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac2814aaffffffff000000000e2429b76870d24430b6b5f84b1ad31a0ad49358067327e1d2cd7c5abbeabf80c3db27a3020e15129545eead13b01b0b262f9aaebe48ec874dbc97ae3be708b0fddf0301d5b8886229b9eb40fe2af6ed787c1dde9bcbec130d4a12fd3056f770b628e6cde8fce06fb8e213d64a91", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @local, @val={@void, {0x8100, 0x7, 0x1, 0x3}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @rand_addr=0x64010101, @local, @remote}}}}, &(0x7f0000000040)={0x0, 0x4, [0x31f, 0xcf6, 0xa3f, 0xd86]}) 07:47:41 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) [ 1611.994734] FAULT_INJECTION: forcing a failure. [ 1611.994734] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.995758] CPU: 1 UID: 0 PID: 15222 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1611.995775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1611.995783] Call Trace: [ 1611.995788] [ 1611.995792] dump_stack_lvl+0xfa/0x120 [ 1611.995808] should_fail_ex+0x4d7/0x5e0 [ 1611.995830] ? mas_alloc_nodes+0x432/0x8f0 [ 1611.995841] should_failslab+0xc2/0x120 [ 1611.995854] kmem_cache_alloc_noprof+0x5f/0x470 [ 1611.995871] ? lock_is_held_type+0x9e/0x120 [ 1611.995894] mas_alloc_nodes+0x432/0x8f0 [ 1611.995908] mas_node_count_gfp+0x106/0x140 [ 1611.995921] mas_preallocate+0x2af/0x690 [ 1611.995940] ? __pfx_mas_preallocate+0x10/0x10 [ 1611.995954] ? __create_object+0x59/0x80 [ 1611.995973] ? lockdep_init_map_type+0x4b/0x240 [ 1611.995990] __split_vma+0x304/0xde0 [ 1611.996009] ? __pfx___split_vma+0x10/0x10 [ 1611.996027] ? mas_prev_setup.constprop.0+0xb7/0x9e0 [ 1611.996042] ? __mpol_equal+0xb0/0x330 [ 1611.996062] ? can_vma_merge_right+0xa5/0x440 [ 1611.996079] vma_modify+0x16fb/0x2030 [ 1611.996099] ? __pfx_vma_modify+0x10/0x10 [ 1611.996118] vma_modify_policy+0x1b0/0x250 [ 1611.996135] ? __pfx_vma_modify_policy+0x10/0x10 [ 1611.996162] mbind_range+0x17a/0x570 [ 1611.996180] do_mbind+0x7b4/0xd70 [ 1611.996200] ? __pfx_do_mbind+0x10/0x10 [ 1611.996216] ? __might_fault+0xe0/0x190 [ 1611.996238] ? __pfx_get_nodes+0x10/0x10 [ 1611.996256] kernel_mbind+0x1e7/0x200 [ 1611.996274] ? __pfx_kernel_mbind+0x10/0x10 [ 1611.996295] do_syscall_64+0xbf/0x360 [ 1611.996308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1611.996321] RIP: 0033:0x7f466f07cb19 [ 1611.996330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1611.996342] RSP: 002b:00007f466c5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1611.996353] RAX: ffffffffffffffda RBX: 00007f466f18ff60 RCX: 00007f466f07cb19 [ 1611.996361] RDX: 0000000000008001 RSI: 0000000000003000 RDI: 0000000020ffa000 [ 1611.996369] RBP: 00007f466c5f21d0 R08: 0000000000000202 R09: 0000000000000000 [ 1611.996377] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 1611.996384] R13: 00007ffc74fe73cf R14: 00007f466c5f2300 R15: 0000000000022000 [ 1611.996400] 07:47:41 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:47:41 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 15) 07:47:41 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) [ 1612.798515] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1612.799928] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1612.802848] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1617.253365] Bluetooth: hci6: command 0x0406 tx timeout 07:47:50 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) 07:47:50 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x89a3, 0x0) 07:47:50 executing program 3: r0 = getpid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 07:47:50 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) 07:47:50 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x300000000000000, 0x0, 0x0, 0x0) 07:47:50 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 16) 07:47:50 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0x0, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:47:50 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) 07:47:50 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x80108906, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x800, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000041) fsync(r1) timerfd_gettime(r0, &(0x7f0000000000)) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 07:47:50 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 17) 07:47:50 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x400000000000000, 0x0, 0x0, 0x0) [ 1621.089662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:47:50 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) [ 1621.107248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1621.125568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:47:50 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 18) 07:47:50 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x500000000000000, 0x0, 0x0, 0x0) [ 1621.213280] FAULT_INJECTION: forcing a failure. [ 1621.213280] name failslab, interval 1, probability 0, space 0, times 0 [ 1621.214256] CPU: 1 UID: 0 PID: 15277 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1621.214272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1621.214280] Call Trace: [ 1621.214285] [ 1621.214289] dump_stack_lvl+0xfa/0x120 [ 1621.214308] should_fail_ex+0x4d7/0x5e0 [ 1621.214333] ? __mpol_dup+0x75/0x390 [ 1621.214350] should_failslab+0xc2/0x120 [ 1621.214362] kmem_cache_alloc_noprof+0x5f/0x470 [ 1621.214384] __mpol_dup+0x75/0x390 [ 1621.214400] ? __pfx___mpol_dup+0x10/0x10 [ 1621.214418] ? lock_is_held_type+0x9e/0x120 [ 1621.214439] mbind_range+0x2b2/0x570 [ 1621.214457] do_mbind+0x7b4/0xd70 [ 1621.214477] ? __pfx_do_mbind+0x10/0x10 [ 1621.214493] ? __might_fault+0xe0/0x190 [ 1621.214516] ? __pfx_get_nodes+0x10/0x10 [ 1621.214534] kernel_mbind+0x1e7/0x200 [ 1621.214552] ? __pfx_kernel_mbind+0x10/0x10 [ 1621.214573] do_syscall_64+0xbf/0x360 [ 1621.214587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.214600] RIP: 0033:0x7f466f07cb19 [ 1621.214609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1621.214621] RSP: 002b:00007f466c5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1621.214633] RAX: ffffffffffffffda RBX: 00007f466f18ff60 RCX: 00007f466f07cb19 [ 1621.214641] RDX: 0000000000008001 RSI: 0000000000003000 RDI: 0000000020ffa000 [ 1621.214648] RBP: 00007f466c5f21d0 R08: 0000000000000202 R09: 0000000000000000 [ 1621.214656] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 1621.214663] R13: 00007ffc74fe73cf R14: 00007f466c5f2300 R15: 0000000000022000 [ 1621.214679] [ 1621.925751] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1621.926786] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1621.930459] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:48:01 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, 0x0) 07:48:01 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = gettid() ioprio_get$pid(0x2, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x5ba2, &(0x7f0000000540)={0x0, 0x75e8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0) sendmsg$unix(r2, &(0x7f0000000400)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000140)="0f6bd66817377a3f8563593ecbe8e1d4e65929c4d0b6c7f0708c3740f19d9270a3371611f080d8120c87aec056becde8d3b11c08c37fa8862225d17e22ba908a5d8445ca755eb837bd4431b1e804ebdd3bffd7eccfe358151b7ba946703d0bd0b9915008f84d18b4a0dc0b66fe41b0f70c55189652992b1e29a1e6d0120250bd8f4e685d2d2ce2eed7a3d605a8354af0c897b2e891480c0496d127d50cbb58df22359bceaf69a5e139a8cdf2908ddd5428185f65672f49013798c280497481333636bcebb764b74dd64a0e55cde030f1244a01de7d37b691aa615e1cbf82c75a215bc5b1", 0xe4}, {&(0x7f0000000240)="fbc241621958fef84dfc818bc6bbb4d815f4b80d66910efaf191095a28485755751aacf847c1cd5984754572129f49c771c4aa43", 0x34}, {&(0x7f0000000280)="cba9d4e6d43eced84942df156a5587ff37ebff08bd42918358c971bf0acfcf062a538a3b386d61652771d9f7b71f2634e07d5de42f2b3d4e682542fde3b449411f176b3b23cbdf67977072423fa12925a12294af6d66db2e79c5f1c95108f82049071f", 0x63}], 0x3, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x4}, 0x800) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x9, 0xd6, 0x22, 0x0, 0x9, 0x4880, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x8200, 0xffffffffffffdbf9, 0x401, 0x1, 0x0, 0xe3d3, 0x9, 0x0, 0x6, 0x0, 0xffff}, r1, 0xd, r4, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) 07:48:01 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x600000000000000, 0x0, 0x0, 0x0) 07:48:01 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) 07:48:01 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 19) 07:48:01 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:48:01 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa86ca58128533bf8c2800000000ff00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) syz_emit_ethernet(0x17a, &(0x7f0000000140)={@random="e227c5415bf9", @remote, @val={@val={0x9100, 0x7, 0x0, 0x3}, {0x8100, 0x3, 0x1, 0x4}}, {@ipv4={0x800, @tipc={{0x48, 0x4, 0x3, 0x5, 0x164, 0x67, 0x0, 0x9, 0x6, 0x0, @empty, @private=0xa010102, {[@cipso={0x86, 0x22, 0xffffffffffffffff, [{0x0, 0xd, "a5bb359999b4ae95d5349b"}, {0x6, 0xf, "80cb936c373e5de72e61e95a10"}]}, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0xe, [{@remote, 0x5}, {@private=0xa010100, 0x10001}, {@loopback, 0x7}, {@broadcast, 0x7819}, {@remote, 0x8}]}, @timestamp_prespec={0x44, 0x3c, 0x5a, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@empty, 0x80}, {@multicast2, 0x4fe}, {@empty, 0x5}, {@remote, 0x10001}, {@loopback, 0x1000}, {@broadcast, 0x2}]}, @cipso={0x86, 0x2d, 0x3, [{0x6, 0xc, "935c04cda954092df33c"}, {0x5, 0x7, "acb6703440"}, {0x7, 0xb, "31a2ae47699d94b957"}, {0x7, 0x4, "657f"}, {0x2, 0x5, "3e7aa9"}]}, @lsrr={0x83, 0x17, 0xdb, [@dev={0xac, 0x14, 0x14, 0x12}, @remote, @rand_addr=0x64010102, @multicast1, @broadcast]}, @generic={0x7, 0x7, "800e7d6b7c"}, @generic={0x83, 0x2}, @timestamp_prespec={0x44, 0x34, 0x7b, 0x3, 0x2, [{@rand_addr=0x64010102, 0x4}, {@loopback, 0xf9}, {@empty, 0x10001}, {@empty}, {@multicast1, 0x101}, {@multicast2, 0x1}]}]}}, @name_distributor={{0x44, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x9, 0x0, 0x1, 0x7, 0x7f, 0x3, 0x4e21, 0x4e23, 0x3, 0x20}, [{0xfffffffe, 0x5, 0x89, 0x2, 0x4, 0x3, 0x9, 0x4}]}}}}}, &(0x7f0000000000)={0x1, 0x2, [0x921, 0xcef, 0x186, 0xc34]}) 07:48:01 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x8907, 0x0) [ 1632.144842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1632.156874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:48:01 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 20) [ 1632.175822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:48:01 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x700000000000000, 0x0, 0x0, 0x0) 07:48:01 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x7bf}}}}}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) recvfrom(r0, &(0x7f0000000000)=""/241, 0xf1, 0x0, &(0x7f0000000140)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3f}, 0x80) syz_emit_ethernet(0x29b, &(0x7f00000001c0)={@broadcast, @multicast, @val={@val={0x9100, 0x3, 0x0, 0x3}, {0x8100, 0x1, 0x1, 0x2}}, {@mpls_mc={0x8848, {[{0x3f, 0x0, 0x1}, {}, {0x6}, {0xffff, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x6}, {0x9}, {0x8000}, {0x9}], @ipv6=@icmpv6={0xd, 0x6, "914dcb", 0x239, 0x3a, 0xff, @private2, @loopback, {[@hopopts={0x3b, 0xb, '\x00', [@ra, @enc_lim={0x4, 0x1, 0x7}, @pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x0, 0x6, [0x2]}}, @ra={0x5, 0x2, 0x7f}, @hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x36}}, @pad1, @generic={0x7, 0xc, "61e8ad5bf81d03ca6ce3af91"}, @enc_lim={0x4, 0x1, 0xff}]}, @fragment={0x33, 0x0, 0x5, 0x0, 0x0, 0x19, 0xccc4}, @fragment={0x29, 0x0, 0x1, 0x0, 0x0, 0x3, 0x64}, @routing={0x16, 0x2, 0x1, 0x7, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x84, 0x0, 0x3, 0x0, 0x0, 0xb, 0x64}, @fragment={0x3c, 0x0, 0x81, 0x1, 0x0, 0xc, 0x68}, @routing={0x84, 0x8, 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @local, @empty]}, @fragment={0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x65}], @ndisc_na={0x88, 0x0, 0x0, 0x80, '\x00', @private0={0xfc, 0x0, '\x00', 0x1}, [{0x22, 0x19, "9967f6091d261e3be4a065bc0555ea9add2815543d73586c75f2da21ce5726fa42320a5ca703216f2b381e79b6bdf190a30660dad356fc2c2c1d3c745d2a4a13ca65f7df30ca2d85e106bf5e1b07ecdf9a4a933d59c482d49b52e3b95a33765d20f198d3b1d4144056c591e8cf8451f3da804cbb0de30b2b936ea428b8ac239ce76fb15d3b2689d804335355ece2e8e5259eec5759d527c879eb6c459b6f5ca2699d41efe77f52a64ec0b46abb7d3aaf4bce87e5ed899537f8c7a7c85abdd9b514f9dba51b719abbb301"}, {0x2b, 0xd, "754de55ca841f484705bc8a7f538aabe6d095a234e65d23d5bf90bbed4fb6fc38341a6605b34c946d8128c55cc4929ebe8a76f12b2715efe64c6cf01e3b088afe89b07023e72acf2a6fb66a1e4df0eb039103c922b3a629057679ba34abdeeb4860988574b412e24c1f241"}]}}}}}}}, &(0x7f0000000480)={0x0, 0x2, [0x748, 0x39e, 0xf20, 0xe9f]}) 07:48:01 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 1) 07:48:01 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, 0x0) [ 1632.251560] FAULT_INJECTION: forcing a failure. [ 1632.251560] name failslab, interval 1, probability 0, space 0, times 0 [ 1632.253415] CPU: 0 UID: 0 PID: 15306 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1632.253446] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1632.253459] Call Trace: [ 1632.253466] [ 1632.253475] dump_stack_lvl+0xfa/0x120 [ 1632.253505] should_fail_ex+0x4d7/0x5e0 [ 1632.253547] ? vm_area_dup+0x25/0x6f0 [ 1632.253568] should_failslab+0xc2/0x120 [ 1632.253591] kmem_cache_alloc_noprof+0x5f/0x470 [ 1632.253629] ? __pfx_shm_may_split+0x10/0x10 [ 1632.253659] vm_area_dup+0x25/0x6f0 [ 1632.253678] ? __pfx_shm_may_split+0x10/0x10 [ 1632.253707] __split_vma+0x179/0xde0 [ 1632.253735] ? arch_stack_walk+0x9c/0xf0 [ 1632.253761] ? __pfx___split_vma+0x10/0x10 [ 1632.253792] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1632.253819] ? __mpol_equal+0xb0/0x330 [ 1632.253858] vma_modify+0xa9c/0x2030 [ 1632.253894] ? __pfx_vma_modify+0x10/0x10 [ 1632.253930] vma_modify_policy+0x1b0/0x250 [ 1632.253960] ? __pfx_vma_modify_policy+0x10/0x10 [ 1632.253988] ? lock_release+0xc8/0x290 [ 1632.254039] mbind_range+0x17a/0x570 [ 1632.254073] do_mbind+0x7b4/0xd70 [ 1632.254111] ? __pfx_do_mbind+0x10/0x10 [ 1632.254140] ? __might_fault+0xe0/0x190 [ 1632.254179] ? __pfx_get_nodes+0x10/0x10 [ 1632.254212] kernel_mbind+0x1e7/0x200 [ 1632.254246] ? __pfx_kernel_mbind+0x10/0x10 [ 1632.254285] do_syscall_64+0xbf/0x360 [ 1632.254311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.254333] RIP: 0033:0x7f466f07cb19 [ 1632.254350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1632.254371] RSP: 002b:00007f466c5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1632.254393] RAX: ffffffffffffffda RBX: 00007f466f18ff60 RCX: 00007f466f07cb19 [ 1632.254408] RDX: 0000000000008001 RSI: 0000000000003000 RDI: 0000000020ffa000 [ 1632.254421] RBP: 00007f466c5f21d0 R08: 0000000000000202 R09: 0000000000000000 [ 1632.254435] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 1632.254449] R13: 00007ffc74fe73cf R14: 00007f466c5f2300 R15: 0000000000022000 [ 1632.254478] [ 1632.309496] FAULT_INJECTION: forcing a failure. [ 1632.309496] name failslab, interval 1, probability 0, space 0, times 0 [ 1632.311263] CPU: 1 UID: 0 PID: 15314 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1632.311294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1632.311308] Call Trace: [ 1632.311317] [ 1632.311325] dump_stack_lvl+0xfa/0x120 [ 1632.311356] should_fail_ex+0x4d7/0x5e0 [ 1632.311400] ? mpol_new+0x117/0x2e0 [ 1632.311425] should_failslab+0xc2/0x120 [ 1632.311447] kmem_cache_alloc_noprof+0x5f/0x470 [ 1632.311477] ? find_held_lock+0x2b/0x80 [ 1632.311508] ? get_pid_task+0xfd/0x250 [ 1632.311544] mpol_new+0x117/0x2e0 [ 1632.311570] do_mbind+0x1c6/0xd70 [ 1632.311603] ? ksys_write+0x121/0x240 [ 1632.311635] ? lock_is_held_type+0x9e/0x120 [ 1632.311670] ? __pfx_do_mbind+0x10/0x10 [ 1632.311700] ? ksys_write+0x187/0x240 [ 1632.311730] ? lock_release+0xc8/0x290 [ 1632.311756] ? __mutex_unlock_slowpath+0x157/0x650 [ 1632.311777] ? vfs_write+0x3/0x10c0 [ 1632.311810] ? get_nodes+0x17c/0x1f0 [ 1632.311833] ? __pfx_get_nodes+0x10/0x10 [ 1632.311857] ? __fget_files+0x20d/0x3b0 [ 1632.311894] kernel_mbind+0x1e7/0x200 [ 1632.311927] ? __pfx_kernel_mbind+0x10/0x10 [ 1632.311967] do_syscall_64+0xbf/0x360 [ 1632.311991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1632.312014] RIP: 0033:0x7f692318bb19 [ 1632.312040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1632.312062] RSP: 002b:00007f6920701188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1632.312091] RAX: ffffffffffffffda RBX: 00007f692329ef60 RCX: 00007f692318bb19 [ 1632.312112] RDX: 0000000000000004 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 1632.312130] RBP: 00007f69207011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1632.312143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1632.312157] R13: 00007ffc924bcd3f R14: 00007f6920701300 R15: 0000000000022000 [ 1632.312186] 07:48:01 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffffffffff000, 0x0, 0x0, 0x0) 07:48:01 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 21) 07:48:01 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 2) 07:48:01 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dc, 0x0) [ 1633.000631] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1633.001989] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1633.178527] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1633.179961] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1633.182432] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:48:11 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x2, 0x0) 07:48:11 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 3) 07:48:11 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x121, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @val={@void, {0x8100, 0x2}}, {@ipv4={0x800, @igmp={{0x21, 0x4, 0x1, 0x38, 0x10f, 0x65, 0x0, 0x1, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x89, 0x5, "d43430"}, @ssrr={0x89, 0xb, 0xe, [@rand_addr=0x64010101, @multicast1]}, @end, @generic={0x86, 0x9, "7b67df8d92747a"}, @timestamp_prespec={0x44, 0x54, 0x53, 0x3, 0x1, [{@broadcast, 0xffff534f}, {@local}, {@multicast2, 0x81}, {@empty, 0x6}, {@local, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3d}, {@multicast2, 0x3}, {@local, 0x20}, {@multicast1, 0x5}, {@remote, 0x6}]}]}}, {0x12, 0x20, 0x0, @private=0xa010100, "0a19d18eb19f38de71c3e3550bfa40604a85f6865471fff9199f9d2613b659e748413c2304609a9c666005afdd8fdbbfcc18b1eb31e13b9e57e1de52600bd4738cc44ad553e635df28106cd4d9f0734fd403026e8d4bf910ff468f7aa974a443de9c0dabf45dcaf2703efbaffc622ef19989612a3abcf748c40d78cb22496d862ab5b8"}}}}}, 0x0) 07:48:11 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="30b619d48548867a081ec2ed880c686b2fee530b54b69bc894c2394f0b48567943e619bb3753ab149ea31a7c88bdc5011c3e76a849281416b8bb1d54f5894cb18fc1788b7b90277785a836d546ce9a05981dd6c7a4ee578da4765ae7219b1b2e602726a1976b403d7feb57e3c72118af5b7cadb0deaf6a069373cebb5e4c113aa8aaf3cf9bf16683d661f9f081b5f338566c1b011c47bdee03e1ce5dbac9391ea06cc2326a5c2bf1f125ccc2eb922a8b6b33da62f47a4f6883d89b7b586602391ce17b9d567a23012e912085ba11278722dd4ec2c716ae5cd88317b718dde7a9892542c43986cdc489ad8814c4a922ee0dd1cec042398b3c5b587e6c6d9c748253594cbbaa26861ee41de2bcc48ca2247e006deffc8fda87ee1a381df52e267f1367e871c6098182fd0780c75a471fd6b139d729b0eab8538e6c3619a4ae23513e9d17719f2ce7cfcce7abff61aac656c68cdef06928e62e7baf45fdf492cb8419a4ff239b70e352f2e5b09b4bbd521d6d586fc8bff2e46e66a77377d309489e4f4b791622fbb704ff6a18ffdfcd9166086a54a9eaee49c74d9713f3843142ef314b665571b3a8400ca93139d0d6cb839a1b0b46efa13f5dac91e014fb5727862e5284b61dcf73217ee2ed5c8d32765ae2a23e90fb6cf778be6ebe561a583b9bb6932d61143baf2f1864dc2350bdfe61587599de3d4a2bb6c501d3e4cc2017b106499e10dee2515bcc540d7665b15972925f10f27067dd599e847fddd257609db34d23857946b92cf29a4b8dbfd16c301663de9adb6ed8405a8685ad3e847cea97328f40efb8788de95cb71adcabe40631e9e82d30d048ec586bc4af2348d8f70ddf606339f0a3ef4d3e9ccd0a5dfdfb726daf53da373877142b35bce3a13695048614a61b6a0782128123fb35990b64dcc5f4c33f361270c01cbf0e892c7f212881f6d03a1165cf70846c59c21e36db0d08120a43c8414db6669053d4ec052baac1bca2b130dfbf490475a73514068202db02636588d607954d9e4ba99e6d1f05d672d98261f0cddab85e3f0b0d909108d29549a9d22ab310e6c296ec89db9ecd1aa7033b683c1cdb92c4be76f6ac82e4e0ab938b2e"}, 0x354) 07:48:11 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e4, 0x0) 07:48:11 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x2}, 0x50, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) 07:48:11 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) 07:48:11 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 22) [ 1641.871006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1641.878538] FAULT_INJECTION: forcing a failure. [ 1641.878538] name failslab, interval 1, probability 0, space 0, times 0 [ 1641.879942] CPU: 1 UID: 0 PID: 15345 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1641.879964] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1641.879973] Call Trace: [ 1641.879978] [ 1641.879984] dump_stack_lvl+0xfa/0x120 [ 1641.880006] should_fail_ex+0x4d7/0x5e0 [ 1641.880038] ? vm_area_dup+0x25/0x6f0 [ 1641.880054] should_failslab+0xc2/0x120 [ 1641.880069] kmem_cache_alloc_noprof+0x5f/0x470 [ 1641.880092] ? __pfx_mt_find+0x10/0x10 [ 1641.880112] ? __pfx_shm_may_split+0x10/0x10 [ 1641.880133] vm_area_dup+0x25/0x6f0 [ 1641.880147] ? __pfx_shm_may_split+0x10/0x10 [ 1641.880167] __split_vma+0x179/0xde0 [ 1641.880190] ? __pfx___split_vma+0x10/0x10 [ 1641.880210] ? mas_prev_setup.constprop.0+0xb7/0x9e0 [ 1641.880230] ? __mpol_equal+0xb0/0x330 [ 1641.880254] ? can_vma_merge_right+0xa5/0x440 [ 1641.880277] vma_modify+0x16fb/0x2030 [ 1641.880303] ? __pfx_vma_modify+0x10/0x10 [ 1641.880329] vma_modify_policy+0x1b0/0x250 [ 1641.880351] ? __pfx_vma_modify_policy+0x10/0x10 [ 1641.880388] mbind_range+0x17a/0x570 [ 1641.880412] do_mbind+0x7b4/0xd70 [ 1641.880440] ? __pfx_do_mbind+0x10/0x10 [ 1641.880461] ? ksys_write+0x187/0x240 [ 1641.880485] ? lock_release+0xc8/0x290 [ 1641.880505] ? __mutex_unlock_slowpath+0x157/0x650 [ 1641.880526] ? __pfx_get_nodes+0x10/0x10 [ 1641.880543] ? __fget_files+0x20d/0x3b0 [ 1641.880571] kernel_mbind+0x1e7/0x200 [ 1641.880595] ? __pfx_kernel_mbind+0x10/0x10 [ 1641.880619] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1641.880647] do_syscall_64+0xbf/0x360 [ 1641.880665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.880682] RIP: 0033:0x7f692318bb19 [ 1641.880694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1641.880709] RSP: 002b:00007f6920701188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1641.880725] RAX: ffffffffffffffda RBX: 00007f692329ef60 RCX: 00007f692318bb19 [ 1641.880736] RDX: 0000000000000004 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 1641.880745] RBP: 00007f69207011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1641.880755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1641.880764] R13: 00007ffc924bcd3f R14: 00007f6920701300 R15: 0000000000022000 [ 1641.880786] [ 1641.906785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1641.912273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1641.925787] FAULT_INJECTION: forcing a failure. [ 1641.925787] name failslab, interval 1, probability 0, space 0, times 0 [ 1641.927220] CPU: 1 UID: 0 PID: 15351 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1641.927241] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1641.927250] Call Trace: [ 1641.927255] [ 1641.927260] dump_stack_lvl+0xfa/0x120 [ 1641.927278] should_fail_ex+0x4d7/0x5e0 [ 1641.927302] ? mas_alloc_nodes+0x432/0x8f0 [ 1641.927315] should_failslab+0xc2/0x120 [ 1641.927330] kmem_cache_alloc_noprof+0x5f/0x470 [ 1641.927351] ? lock_is_held_type+0x9e/0x120 [ 1641.927378] mas_alloc_nodes+0x432/0x8f0 [ 1641.927397] mas_node_count_gfp+0x106/0x140 [ 1641.927413] mas_preallocate+0x2af/0x690 [ 1641.927433] ? __pfx_mas_preallocate+0x10/0x10 [ 1641.927452] ? __create_object+0x59/0x80 [ 1641.927476] ? lockdep_init_map_type+0x4b/0x240 [ 1641.927497] __split_vma+0x304/0xde0 [ 1641.927519] ? __pfx___split_vma+0x10/0x10 [ 1641.927542] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1641.927560] ? __mpol_equal+0xb0/0x330 [ 1641.927586] vma_modify+0xa9c/0x2030 [ 1641.927612] ? __pfx_vma_modify+0x10/0x10 [ 1641.927638] vma_modify_policy+0x1b0/0x250 [ 1641.927659] ? __pfx_vma_modify_policy+0x10/0x10 [ 1641.927679] ? lock_release+0xc8/0x290 [ 1641.927709] mbind_range+0x17a/0x570 [ 1641.927733] do_mbind+0x7b4/0xd70 [ 1641.927760] ? __pfx_do_mbind+0x10/0x10 [ 1641.927781] ? __might_fault+0xe0/0x190 [ 1641.927809] ? __pfx_get_nodes+0x10/0x10 [ 1641.927832] kernel_mbind+0x1e7/0x200 [ 1641.927856] ? __pfx_kernel_mbind+0x10/0x10 [ 1641.927885] do_syscall_64+0xbf/0x360 [ 1641.927902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.927917] RIP: 0033:0x7f466f07cb19 [ 1641.927928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1641.927943] RSP: 002b:00007f466c5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1641.927957] RAX: ffffffffffffffda RBX: 00007f466f18ff60 RCX: 00007f466f07cb19 [ 1641.927968] RDX: 0000000000008001 RSI: 0000000000003000 RDI: 0000000020ffa000 [ 1641.927978] RBP: 00007f466c5f21d0 R08: 0000000000000202 R09: 0000000000000000 [ 1641.927987] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 1641.927996] R13: 00007ffc74fe73cf R14: 00007f466c5f2300 R15: 0000000000022000 [ 1641.928017] 07:48:11 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x1019, &(0x7f0000000140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, @val={@val={0x9100, 0x1, 0x0, 0x2}, {0x8100, 0x7, 0x1, 0x1}}, {@llc_tr={0x11, {@llc={0x80, 0x42, "01", "ca74388a1fa264c659281d39dc3fdf89faa0b69877ddd83767078eb2d067676f9c99026fc28fabbb2fd3fb0954f8798bc4fb3df219a0af8ccf89738d0bca314d4590dd1efd1996bc8b308d166607df54736b04f395486389f8a379fb6c669afe7eabd74cc69679737b9fb35cc7363fb01ef36464986317175adf10f2d37dc571d24726b061d07b810ef3041431d987997b005834e50eab7d2f5e1a49f24042b0676bb3c264bf85be6e63eae9c00a88f4e36c1105715511e2b3e28b04bddcf9eb50462a38abe6bd35a4a7bb2292f9f54d8cd703d830232e6d23d5f904d5982d20b514a55dacff624204ab91e7588181661cec0ebc3ee3377cb256d1a0fb187172a01779d764ee032fb7d721d379b6ce5774da2b584116da7a7607a536a413f91f128f34cee11c200841e36f6d3f63dce14912db0f1e80c5f452c20534bcab34b4cd038fcbe7f33e049238695a8a73daf384911adbd04ccf2b52536f0cd1ff1ca99f9695fc6f246e7692391817bbe6ca894280640cd3335f7a322af9a1177effcc2a8dcb5db3c9ffd7450fd84ece53792b64089cd0346ce94d10bf933df2a29d6aee86fa99943094a20384cf1a430ce0dfd67a220da9ad01c2e273c38586266a8da3c1fbecc43d6dc2cee4c3c7a215bdd83eb151feab37ab070bf78df101bb09612166c77727042630dcb021f315d4dfbc9b5f8849a08a9c6fedf9095cd9c8bf7d15184e3dadd86c99a7ed12c8e8c025e93dc261e65d8ea4bc952b0c37e2d46f7445183e3764dbf7f8b7c4a27aa9e5727dd986900d81991d06a2e79fc6344d48f7aae33c87d94a79aa89b7dd1c59f798a7e8d6e9ecb398a7916e917def5cf776a468bd1b397d35132854708d4b4bb189174a562f0cd9485cd67d20ebe97f2256672344f0279b7eee8e4e2e344e99900ac3c76780e4fe6356ce60b99de31900a0bfbb41269aeaca29757d9dd5fa44d1f710d6f27a8fe1f8ba8c457c7f3b80de0a5e8baec6e9a323207d6195cf8abbc5d6888007259450dc55c7a2dfd696456886901f6461b3cf26b9b9fb0f0bbecb895484627a9aad86d381568ef6fa1334578547284e22ed0925490bd3d8e3c96661bca3ea261dbf92bfbb207b33f2d0a5e2ab763068fa0ccd1ac34863514d9f30d822fc4b49f16f5a92491acdb0c97713d60527927ee33c0ce4dc22b234cef848b5b364e3b9a07a6a10c62b005a57d934cb6a38bf62ad4ddab7c85f688f64f6a52a4feb7f93155d5057b08930faa7315f45d19ba67e251028fa519db9ec8e2b4c5b049f79fe540ea7607340515462f0f9ce45d7c6573367d83c67e807c9132756f4f32450d61cf7e6baf67bc9ecaaa7f9617b97a76befeab44f6e4dc65d943a224a684cdfefba9a1c029e52a85a36e608ba9200164b65d85e4fb39ad67a2da5eabe93eb98bc359520b973ca798f4cfe6168f3430b5d132fde1a7585da5d103d1f14375cc14b5bcb9a0be72b7e965d69efd1ef5f64e613e2fd008289053efa94e563bae9278267a5437822ce40f0424f5a393a446313c1197381c225cbeea3de4cf293a1871bc883c7a954ca1cbb90a8c00733c87d32f74e53d7a96d1913233f995ab5a8fa21490adc7f735e8a75c647cb159e9504becb7939484f674ed2745017d1c3aa22378ba6a94600f38559b3c2789552af83b5852d58200bfcf72e70bce892762dadb043e70080ced67a84b96f1ecd985ce16c109a2df9e24aeb5638f6588378c5edd678c9331126ec6db247135d78b28b91d01755190b91ec81dca8d076137e5a68972f633bb41e1353735d47a58a7d4f2cbf561f60492ef1674f8991cf5879c93586edf42898a7ba025999901c2973c20a8834feefbb8849c14d20182fc65a6f67897a64bf52c72468dcd43ffd6cf3da4e883636ccfd321ede4caf0dd8afbe9cbefdc047ecf5d7511bc502d736d139bcefa908d2a911b427a2ff85f70a7daa1def9bf2890d0ef825a00be4c82145d0e511f52d16259fc8d7afd714f61fee12e9def52d250c82621d17174a88261df955290574988b8668b3285451fb782cfa36682330f03e1f4c0c574f07a58753cb36905bfe1e9ec9df3765de7b5e9a6db918f0f7ca61f2dd8312449288983c291e1f4312e6a1c384aedfd9fcdd936f61182b8ae5debeb68c4be240e3cda29fbbea44b19cff08a0a39d25dd669bb43b99afce2649b73dd956c5f7de12f683f24aef20352571a14397e56e189694bcdb847653b2c42351018d0e30a4f83429d3c1c771bbcc62d9b372ec9e9e9681bffe90578b96831e56f040c7abad2b4a1176ccf2cafad12d9e62617bb1ae2b0321ec6d2dfb074b75a3dd913d32beff6975c9f9dd0e03037eef899098fd639b9fc92bdc2ef867789b708f476e08c8f2276f305a3275fda00fa1a6cfa82e0cbbf6967ab9be8170f2893c41e050856fb9fd1203abf577685f7284c8e88d65207a8fa1ff3cfbc557d966da9d12276aac2c2547743803bdd6bb7103a94244d1e5b9e39f69ffd44156cfb990e7c47834398dbe5628c1109ce00f1337dfc2894311b19fb63515e998f4f483ff886e7917a996d6b981d4f5913b36e3e436bca1b04e16084f066b0fddf7adeea4b26a8353205faaf1358d0f0723c91a3c5c937a8f0d4dc9aa3c511b2f08eb309d8ed1863f12fcde264a7ce0844beda37e9f1e322ffa36bc196aef962850e7c555360a1c7d0b48bc1f4b5f2f37843b4a645f66daff80df18983b246944987e673d4251b400d938db9d361eb67c809daf686dc2654c5477ffff1feff6f172bde8fb967e20c3f30e932c68b475ad2a79c5334df608f384f4b0078faec9e4135ae97f92c00d2d700443b1e6d0210dbb84ef8b7a65ead642c12345358622e1b303e07e860b5f5ce82f4109bc6355fe47cb6745175077a1888a88378223f779bf100051572ccee09319562709004b79f3f21322c868a6dff624f570273bece5890597d6c1b9cfe643d6ae4479258b53efdd4fb129614a5d4ffdf219524db899ec0287d1c9a876bb73daef68662796cdcb07f3d1412cf763a6adb01abff94b06cd022a7dd564161041f1b9af645910cb4ec28809ec1b7834149f0497a3c1b2e1fca78d4bf16d967ef7b408ec5a02952411fa581baf2fef53975af7d92e8daa4d009ff49fa8356d13779e8975cb11b9f1c2a05c4a5d122fcfeff7307f9995b07df8a01da3c48b28c6f2ed697a016cbdcde8914a73102bbe70c910ce6e8d15c8898556f57fd3e86db2c86930549f67fb1f82c2a4874d2e396c17dfc5bcc37ae4c6f1d007a92567d5e65a859d8ce3789a60d93294c93ae491ee5b22ba566305c6a35259cdb035efd2520b1c6b69a92af8c2a0fa084118058ab49f277618444d66e222a96e3675a29583ea0e541bdb63e999a90039679352ec876c1291247d50bf8bc24f077b40ba44a0fa7c6732eeb58b863db1e76039771565274a40c01b743707793c673b74706f9893bf903a25b3c8d5aa17e3e9df6bfda4cbc15f453d75329d0f4298e6ed366f0150758141560e11f63aa31e94bedb64684934b8f365613a0ad888f6925579903a17ab177bdfc9cd34b843047c099f8aa9a50b86a49e6bb1554c4fce8cc4c52c98a9a4ad048d4491492735be63413935c22ac8684f4396596edd6abe3b056df22d7bab0b2e7139280f3fb604549f2d5a5ada0b8d2c3aac5cadbbc2b12789471202f39ed3a0278512812742e547161fc615132f61a1efcc0cacc681798e4c786273e3e030337c994cadad8aee8587ed431d0e7345d73ed3dca9a9aa52909461337fa0c3399a24c9c9b37ed571cfe4e69a3ac5efed8e6ddb9b148bd587a81a095d593bd68eb9e5a6c727e5c8ed909cbecebe9686d9e387dd4db5d732e8ac925526707fbb29c66dd442fea50213d913e49915af008f413ba115dff86520f3f9d5eba55903e41c4d752d88cc6192e3aecdada4da1c43bb3c92abcadb458ef6eaa01e825eaef7e0a7338fc250a56a7ebbb418c3f3a07edb91389192e81bd46798af4cad60b33e3461fc871b0e39b51b4d343ce225ab2aa5c321b621af5d59c9e0c8f34d4744858f99f77a453f0536c25248b7db13c10d61b5f00f98d71dc2b93084d18f7e44830109ebeb8f6f6a08c6bd86e47952a99df4ae605f3d7eb43414ed5cd39ea3abff284fd933b5db3e738c7525508ea25b1a9da0ea6c1c0d4b86a7bfb738a656315996b9669e3c0f9416a0aea5bdfc81b2efd3074c88ead053ff63333141b8cceaa2b5467176f6b5119a7bff7edc938210e0a7162d5f044dac7e53945784939216337ef6c6275391e0c65a6a0f3a13ef99c4ff91847ca6c5339c06541d6641646a56686e046855e1bf2f6d62e744ea43bef33556d9d19f05e88b57b52ab6683874e2d4eaa32ecc3507b09342fc1896e219a6a3969c0660a404cc0a94dd6f548d3c260a6e91566f64b4d962686a729858cde923fa4a4dc7940e92fa877fe06080c1c59ba6473a36cd958004f26646fb58e794c6976259c9f92da60e34afb45f245ed70e2ed66f9ff48209d44148b6aea930d73ad5ac87ee788d65fdd38728432d76fb4122b36c945ff2939cc686cc4cd5b8d24962c61264bd882363181019a0ddb1e56b6c54f93574bfd98650774f502c12c2e088231a20a007a22edd33fe7d56bcab0470e0e0dddabf7c63392f914a837fa5a05992dbb3281888e063c86976e97e53aaa658ab616fb3c439c422dcfdc73e4ede46bcb94088ca6cc1c28857c3a56d85610999d777a218c29f3b4e406569c8b51d750082273156faa9682ea2719ac636f318c325d2c136e87bd841824971d1f8639c195b32b5f3aac30387ecd14650ae90578a0c9d6cfe8d4eaf9f42d301fe9d57d337d92352a2fd19b43f13a7af961bf6c31f7d6802ae48f3437191da0a4f039b30e4f81ffd4d4be99d3595fef22ec070314ff1c6f4ae4fb8458b633b043ad8b132324b43b121acc32098164a9159b9db344e5581cfc64fe0eafd8a6b4a7aa693cbcc9177eaa9d3c7e32415f3fb2c3a11babcd9f65e139417542ec1a0d871594befddfdee2860663c1a72d5e87bdc165f06f7ceeb473fb9378621c4ea28d8525af62e437cb56e16f76b06dba9e869f3944fbcb26f5123466c3f9f1cd9d385149b8e689e2424216c57f6c0e2d37b9c46ace49d531307f7b165b8a241920b5ec6c778956aea065d3d3c983f82e6b4c8396767056f3df2e4610cab4771308f3a850469292a1186f756427965087b48e3d287fa01040f2a03363f15ccd6f5c05539b192c97f226dceb9dcd0b2c51f17315a722c86545dd3d7b0b4530fceeeccdb52bbbb7f1685d587a9d73726ece3fcc9d57ef96c6919d932269e2a67946e31251f513d8d174faf75d483909f5cafca2188d46a3b6c85faf37d140f99d2be23d3660fbe41ab5184c410679f7d71ef16d4b37cfe5b725ce1bcfc2dc3e6bfaba04e257825195b8c746aa3d1489fc1a29b0d44beaeef64b83b8ff4676fba5607bbaa4a7cb86add5377f451249f3d1c73957e8a857c6f4578e4a184a586880b6552203d9f3fbf507c2c90d8152e21182b105e096c2024f6d99dca96015e753c4a2503a67f232145f8075ea62495020b179d149b8e9d40a1cc2a49979291baca7243fd0048887d29366625ac9e6db73d70bcf7495275b89c40595549921e53fc37f10f94f78c88b909507d9bb33c40e0143f7a6caa45c71c828462d559767afaede19921a8b6d28fbbbcd64bdade3d0f43044d1be270bbf61afef76817f4227967ffcdbcb9b8635b69d346dd1a4aa598c5ede444975eaf08a0"}}}}}, &(0x7f0000000000)={0x1, 0x4, [0x2dc, 0x4da, 0xd76, 0xf97]}) 07:48:11 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x3, 0x0) 07:48:11 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cb, 0x0) 07:48:11 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 23) 07:48:11 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @multicast2, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 07:48:11 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e6, 0x0) 07:48:11 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 4) 07:48:11 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x4, 0x0) [ 1642.898360] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1642.899958] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:48:21 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000000)=0x3, 0x4) 07:48:21 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e7, 0x0) 07:48:21 executing program 2: ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000)) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac1445d6ffff000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="1100000000000000"], 0x0) 07:48:21 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448cc, 0x0) 07:48:21 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 24) 07:48:21 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x5, 0x0) 07:48:21 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 5) 07:48:21 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) [ 1652.148365] FAULT_INJECTION: forcing a failure. [ 1652.148365] name failslab, interval 1, probability 0, space 0, times 0 [ 1652.149296] CPU: 0 UID: 0 PID: 15390 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1652.149313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1652.149320] Call Trace: [ 1652.149324] [ 1652.149329] dump_stack_lvl+0xfa/0x120 [ 1652.149346] should_fail_ex+0x4d7/0x5e0 [ 1652.149368] ? __mpol_dup+0x75/0x390 [ 1652.149384] should_failslab+0xc2/0x120 [ 1652.149396] kmem_cache_alloc_noprof+0x5f/0x470 [ 1652.149413] ? lock_release+0xc8/0x290 [ 1652.149430] __mpol_dup+0x75/0x390 [ 1652.149445] ? __pfx___mpol_dup+0x10/0x10 [ 1652.149462] ? lock_is_held_type+0x9e/0x120 [ 1652.149482] mbind_range+0x2b2/0x570 [ 1652.149501] do_mbind+0x7b4/0xd70 [ 1652.149521] ? __pfx_do_mbind+0x10/0x10 [ 1652.149536] ? __might_fault+0xe0/0x190 [ 1652.149558] ? __pfx_get_nodes+0x10/0x10 [ 1652.149576] kernel_mbind+0x1e7/0x200 [ 1652.149594] ? __pfx_kernel_mbind+0x10/0x10 [ 1652.149612] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1652.149634] do_syscall_64+0xbf/0x360 [ 1652.149647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.149659] RIP: 0033:0x7f466f07cb19 [ 1652.149669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1652.149680] RSP: 002b:00007f466c5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1652.149692] RAX: ffffffffffffffda RBX: 00007f466f18ff60 RCX: 00007f466f07cb19 [ 1652.149700] RDX: 0000000000008001 RSI: 0000000000003000 RDI: 0000000020ffa000 [ 1652.149707] RBP: 00007f466c5f21d0 R08: 0000000000000202 R09: 0000000000000000 [ 1652.149714] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 1652.149722] R13: 00007ffc74fe73cf R14: 00007f466c5f2300 R15: 0000000000022000 [ 1652.149738] [ 1652.179520] FAULT_INJECTION: forcing a failure. [ 1652.179520] name failslab, interval 1, probability 0, space 0, times 0 [ 1652.180457] CPU: 0 UID: 0 PID: 15397 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1652.180473] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1652.180479] Call Trace: [ 1652.180483] [ 1652.180488] dump_stack_lvl+0xfa/0x120 [ 1652.180501] should_fail_ex+0x4d7/0x5e0 [ 1652.180520] ? mas_alloc_nodes+0x432/0x8f0 [ 1652.180530] should_failslab+0xc2/0x120 [ 1652.180542] kmem_cache_alloc_noprof+0x5f/0x470 [ 1652.180558] ? lock_is_held_type+0x9e/0x120 [ 1652.180578] mas_alloc_nodes+0x432/0x8f0 [ 1652.180592] mas_node_count_gfp+0x106/0x140 [ 1652.180605] mas_preallocate+0x2af/0x690 [ 1652.180623] ? __pfx_mas_preallocate+0x10/0x10 [ 1652.180637] ? __create_object+0x59/0x80 [ 1652.180657] ? lockdep_init_map_type+0x4b/0x240 [ 1652.180673] __split_vma+0x304/0xde0 [ 1652.180691] ? __pfx___split_vma+0x10/0x10 [ 1652.180705] ? mas_prev_setup.constprop.0+0xb7/0x9e0 [ 1652.180719] ? __mpol_equal+0xb0/0x330 [ 1652.180737] ? can_vma_merge_right+0xa5/0x440 [ 1652.180755] vma_modify+0x16fb/0x2030 [ 1652.180774] ? __pfx_vma_modify+0x10/0x10 [ 1652.180793] vma_modify_policy+0x1b0/0x250 [ 1652.180810] ? __pfx_vma_modify_policy+0x10/0x10 [ 1652.180837] mbind_range+0x17a/0x570 [ 1652.180855] do_mbind+0x7b4/0xd70 [ 1652.180875] ? __pfx_do_mbind+0x10/0x10 [ 1652.180891] ? ksys_write+0x187/0x240 [ 1652.180909] ? lock_release+0xc8/0x290 [ 1652.180923] ? __mutex_unlock_slowpath+0x157/0x650 [ 1652.180939] ? __pfx_get_nodes+0x10/0x10 [ 1652.180951] ? __fget_files+0x20d/0x3b0 [ 1652.180972] kernel_mbind+0x1e7/0x200 [ 1652.180990] ? __pfx_kernel_mbind+0x10/0x10 [ 1652.181012] do_syscall_64+0xbf/0x360 [ 1652.181029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.181040] RIP: 0033:0x7f692318bb19 [ 1652.181049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1652.181060] RSP: 002b:00007f6920701188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1652.181072] RAX: ffffffffffffffda RBX: 00007f692329ef60 RCX: 00007f692318bb19 [ 1652.181079] RDX: 0000000000000004 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 1652.181086] RBP: 00007f69207011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1652.181094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1652.181101] R13: 00007ffc924bcd3f R14: 00007f6920701300 R15: 0000000000022000 [ 1652.181117] 07:48:21 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 25) [ 1652.214627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:48:21 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40049409, 0x0) [ 1652.235791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1652.266700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:48:21 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x6, 0x0) 07:48:21 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x5ba2, &(0x7f0000000540)={0x0, 0x75e8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) sendmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x5c6c, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r2, r3]}, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000079078ac2814aaffffffff00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 07:48:21 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 26) 07:48:21 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 6) 07:48:21 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dc, 0x0) 07:48:21 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40086602, 0x0) [ 1652.341312] FAULT_INJECTION: forcing a failure. [ 1652.341312] name failslab, interval 1, probability 0, space 0, times 0 [ 1652.342237] CPU: 0 UID: 0 PID: 15411 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1652.342254] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1652.342261] Call Trace: [ 1652.342266] [ 1652.342271] dump_stack_lvl+0xfa/0x120 [ 1652.342290] should_fail_ex+0x4d7/0x5e0 [ 1652.342312] ? sp_alloc+0x25/0x160 [ 1652.342329] should_failslab+0xc2/0x120 [ 1652.342342] kmem_cache_alloc_noprof+0x5f/0x470 [ 1652.342359] ? find_held_lock+0x2b/0x80 [ 1652.342377] ? current_cpuset_is_being_rebound+0xf6/0x370 [ 1652.342395] ? lock_release+0xc8/0x290 [ 1652.342409] sp_alloc+0x25/0x160 [ 1652.342425] mpol_set_shared_policy+0xae/0x8b0 [ 1652.342442] ? __mpol_dup+0x1cb/0x390 [ 1652.342458] ? __pfx___mpol_dup+0x10/0x10 [ 1652.342474] ? __pfx_shmem_set_policy+0x10/0x10 [ 1652.342488] shm_set_policy+0xb7/0xf0 [ 1652.342504] ? __pfx_shm_set_policy+0x10/0x10 [ 1652.342519] mbind_range+0x33d/0x570 [ 1652.342538] do_mbind+0x7b4/0xd70 [ 1652.342558] ? __pfx_do_mbind+0x10/0x10 [ 1652.342573] ? __might_fault+0xe0/0x190 [ 1652.342596] ? __pfx_get_nodes+0x10/0x10 [ 1652.342614] kernel_mbind+0x1e7/0x200 [ 1652.342632] ? __pfx_kernel_mbind+0x10/0x10 [ 1652.342650] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1652.342671] do_syscall_64+0xbf/0x360 [ 1652.342685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.342697] RIP: 0033:0x7f466f07cb19 [ 1652.342707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1652.342718] RSP: 002b:00007f466c5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1652.342730] RAX: ffffffffffffffda RBX: 00007f466f18ff60 RCX: 00007f466f07cb19 [ 1652.342738] RDX: 0000000000008001 RSI: 0000000000003000 RDI: 0000000020ffa000 [ 1652.342745] RBP: 00007f466c5f21d0 R08: 0000000000000202 R09: 0000000000000000 [ 1652.342753] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 1652.342760] R13: 00007ffc74fe73cf R14: 00007f466c5f2300 R15: 0000000000022000 [ 1652.342776] [ 1652.979662] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1653.180658] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:48:32 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x7, 0x0) 07:48:32 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 27) 07:48:32 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 7) 07:48:32 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40087602, 0x0) 07:48:32 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) 07:48:32 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x0, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="30b619d48548867a081ec2ed880c686b2fee530b54b69bc894c2394f0b48567943e619bb3753ab149ea31a7c88bdc5011c3e76a849281416b8bb1d54f5894cb18fc1788b7b90277785a836d546ce9a05981dd6c7a4ee578da4765ae7219b1b2e602726a1976b403d7feb57e3c72118af5b7cadb0deaf6a069373cebb5e4c113aa8aaf3cf9bf16683d661f9f081b5f338566c1b011c47bdee03e1ce5dbac9391ea06cc2326a5c2bf1f125ccc2eb922a8b6b33da62f47a4f6883d89b7b586602391ce17b9d567a23012e912085ba11278722dd4ec2c716ae5cd88317b718dde7a9892542c43986cdc489ad8814c4a922ee0dd1cec042398b3c5b587e6c6d9c748253594cbbaa26861ee41de2bcc48ca2247e006deffc8fda87ee1a381df52e267f1367e871c6098182fd0780c75a471fd6b139d729b0eab8538e6c3619a4ae23513e9d17719f2ce7cfcce7abff61aac656c68cdef06928e62e7baf45fdf492cb8419a4ff239b70e352f2e5b09b4bbd521d6d586fc8bff2e46e66a77377d309489e4f4b791622fbb704ff6a18ffdfcd9166086a54a9eaee49c74d9713f3843142ef314b665571b3a8400ca93139d0d6cb839a1b0b46efa13f5dac91e014fb5727862e5284b61dcf73217ee2ed5c8d32765ae2a23e90fb6cf778be6ebe561a583b9bb6932d61143baf2f1864dc2350bdfe61587599de3d4a2bb6c501d3e4cc2017b106499e10dee2515bcc540d7665b15972925f10f27067dd599e847fddd257609db34d23857946b92cf29a4b8dbfd16c301663de9adb6ed8405a8685ad3e847cea97328f40efb8788de95cb71adcabe40631e9e82d30d048ec586bc4af2348d8f70ddf606339f0a3ef4d3e9ccd0a5dfdfb726daf53da373877142b35bce3a13695048614a61b6a0782128123fb35990b64dcc5f4c33f361270c01cbf0e892c7f212881f6d03a1165cf70846c59c21e36db0d08120a43c8414db6669053d4ec052baac1bca2b130dfbf490475a73514068202db02636588d607954d9e4ba99e6d1f05d672d98261f0cddab85e3f0b0d909108d29549a9d22ab310e6c296ec89db9ecd1aa7033b683c1cdb92c4be76f6ac82e4e0ab938b2e"}, 0x354) 07:48:32 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x58182}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) 07:48:32 executing program 2: syz_emit_ethernet(0xfffffffffffffede, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000aaaaaaaaaa000800451000280000000000069078ac2814aae000000200000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5040000090f80000"], 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x9, 0xb1, 0x3f, 0x5, 0x0, 0x81, 0x18800, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0xffffffff, 0x4}, 0x541, 0x1, 0x9, 0x0, 0x80000001, 0x3, 0xfff7, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8) [ 1663.412771] FAULT_INJECTION: forcing a failure. [ 1663.412771] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.414705] CPU: 0 UID: 0 PID: 15435 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1663.414735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1663.414748] Call Trace: [ 1663.414755] [ 1663.414763] dump_stack_lvl+0xfa/0x120 [ 1663.414792] should_fail_ex+0x4d7/0x5e0 [ 1663.414828] ? __mpol_dup+0x75/0x390 [ 1663.414858] should_failslab+0xc2/0x120 [ 1663.414878] kmem_cache_alloc_noprof+0x5f/0x470 [ 1663.414916] __mpol_dup+0x75/0x390 [ 1663.414944] ? __pfx___mpol_dup+0x10/0x10 [ 1663.414976] ? lockdep_init_map_type+0x4b/0x240 [ 1663.415005] vma_dup_policy+0x47/0xd0 [ 1663.415042] __split_vma+0x329/0xde0 [ 1663.415074] ? __pfx___split_vma+0x10/0x10 [ 1663.415101] ? mas_prev_setup.constprop.0+0xb7/0x9e0 [ 1663.415129] ? __mpol_equal+0xb0/0x330 [ 1663.415161] ? can_vma_merge_right+0xa5/0x440 [ 1663.415192] vma_modify+0x16fb/0x2030 [ 1663.415228] ? __pfx_vma_modify+0x10/0x10 [ 1663.415276] vma_modify_policy+0x1b0/0x250 [ 1663.415305] ? __pfx_vma_modify_policy+0x10/0x10 [ 1663.415356] mbind_range+0x17a/0x570 [ 1663.415390] do_mbind+0x7b4/0xd70 [ 1663.415427] ? __pfx_do_mbind+0x10/0x10 [ 1663.415457] ? ksys_write+0x187/0x240 [ 1663.415488] ? lock_release+0xc8/0x290 [ 1663.415514] ? __mutex_unlock_slowpath+0x157/0x650 [ 1663.415543] ? __pfx_get_nodes+0x10/0x10 [ 1663.415567] ? __fget_files+0x20d/0x3b0 [ 1663.415604] kernel_mbind+0x1e7/0x200 [ 1663.415637] ? __pfx_kernel_mbind+0x10/0x10 [ 1663.415677] do_syscall_64+0xbf/0x360 [ 1663.415701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.415723] RIP: 0033:0x7f692318bb19 [ 1663.415740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1663.415762] RSP: 002b:00007f6920701188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1663.415783] RAX: ffffffffffffffda RBX: 00007f692329ef60 RCX: 00007f692318bb19 [ 1663.415799] RDX: 0000000000000004 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 1663.415812] RBP: 00007f69207011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1663.415825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1663.415838] R13: 00007ffc924bcd3f R14: 00007f6920701300 R15: 0000000000022000 [ 1663.415867] [ 1663.432155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:48:32 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 28) [ 1663.483825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1663.493594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:48:32 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xf0, 0x0) 07:48:32 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e4, 0x0) 07:48:32 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 07:48:32 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x401c5820, 0x0) [ 1663.564886] FAULT_INJECTION: forcing a failure. [ 1663.564886] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.566028] CPU: 0 UID: 0 PID: 15451 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1663.566051] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1663.566060] Call Trace: [ 1663.566065] [ 1663.566072] dump_stack_lvl+0xfa/0x120 [ 1663.566093] should_fail_ex+0x4d7/0x5e0 [ 1663.566122] ? __mpol_dup+0x75/0x390 [ 1663.566142] should_failslab+0xc2/0x120 [ 1663.566157] kmem_cache_alloc_noprof+0x5f/0x470 [ 1663.566184] __mpol_dup+0x75/0x390 [ 1663.566203] ? __pfx___mpol_dup+0x10/0x10 [ 1663.566221] ? kmem_cache_alloc_noprof+0x352/0x470 [ 1663.566246] ? find_held_lock+0x2b/0x80 [ 1663.566276] ? current_cpuset_is_being_rebound+0xc0/0x370 [ 1663.566309] ? lock_release+0xc8/0x290 [ 1663.566334] sp_alloc+0x48/0x160 [ 1663.566363] mpol_set_shared_policy+0xae/0x8b0 [ 1663.566394] ? __mpol_dup+0x1cb/0x390 [ 1663.566420] ? __pfx___mpol_dup+0x10/0x10 [ 1663.566448] ? __pfx_shmem_set_policy+0x10/0x10 [ 1663.566470] shm_set_policy+0xb7/0xf0 [ 1663.566495] ? __pfx_shm_set_policy+0x10/0x10 [ 1663.566523] mbind_range+0x33d/0x570 [ 1663.566559] do_mbind+0x7b4/0xd70 [ 1663.566596] ? __pfx_do_mbind+0x10/0x10 [ 1663.566624] ? __might_fault+0xe0/0x190 [ 1663.566661] ? __pfx_get_nodes+0x10/0x10 [ 1663.566697] kernel_mbind+0x1e7/0x200 [ 1663.566732] ? __pfx_kernel_mbind+0x10/0x10 [ 1663.566766] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1663.566806] do_syscall_64+0xbf/0x360 [ 1663.566831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.566849] RIP: 0033:0x7f466f07cb19 [ 1663.566861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1663.566875] RSP: 002b:00007f466c5f2188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1663.566890] RAX: ffffffffffffffda RBX: 00007f466f18ff60 RCX: 00007f466f07cb19 [ 1663.566900] RDX: 0000000000008001 RSI: 0000000000003000 RDI: 0000000020ffa000 [ 1663.566909] RBP: 00007f466c5f21d0 R08: 0000000000000202 R09: 0000000000000000 [ 1663.566918] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 1663.566927] R13: 00007ffc74fe73cf R14: 00007f466c5f2300 R15: 0000000000022000 [ 1663.566947] 07:48:32 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 8) 07:48:32 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 29) 07:48:32 executing program 2: syz_emit_ethernet(0x92, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00910034008100180008004500007c0000000800000078ac2814aa00000028530a008df65cdd71016aa20000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000fa8e2e6160bc2efebfba9779cdeea86c64e170af204e0aafbb54c04731c75a2985c80857f8fd16379f56bd06d4f9aab1fdce80dae2868a27361ac5ab3801efdc8ab6b5a86ab2d80e8252f12d9d7aa5e0e6e411790679028935e6ea76ea3507ddf67eaf356fee4c7ed13cb41fe959380ed871e24847d452515bf8eef99734b4dcf71bfe456a117ac20a5ebda80808064e6db8352637d741745e96e13d782ca4c8fa9a599ab053fc94e7c82e72b2dac90ba8a174cdae5987ac07ae5e5c50582c8e19"], 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000280)=@tipc=@id, &(0x7f0000000300)=0x80) recvfrom(r0, &(0x7f0000000340)=""/152, 0x98, 0x0, &(0x7f0000000400)=@isdn={0x22, 0x0, 0x40, 0x8, 0x70}, 0x80) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val, @val={0x2, 0x0, 0x0, 0x4, 0xff20, 0x1e}, @eth={@random="9f4c20fc0a50", @multicast, @void, {@ipv4={0x800, @tipc={{0x3a, 0x4, 0x3, 0x6, 0x109, 0x67, 0x0, 0x6, 0x6, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x17, 0xf, [@rand_addr=0x64010101, @rand_addr=0x64010100, @loopback, @empty, @broadcast]}, @timestamp_prespec={0x44, 0x1c, 0x57, 0x3, 0x3, [{@broadcast, 0xffffff8b}, {@private=0xa010101, 0x7ff}, {@multicast1, 0x10001}]}, @rr={0x7, 0x27, 0xb6, [@dev={0xac, 0x14, 0x14, 0x2a}, @remote, @local, @local, @local, @empty, @private=0xa010102, @empty, @local]}, @timestamp_addr={0x44, 0x34, 0xaa, 0x1, 0xe, [{@private=0xa010100, 0x100}, {@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x9}, {@local, 0x7c6}, {@private=0xa010102, 0x2}, {@loopback, 0x101}]}, @lsrr={0x83, 0x7, 0x62, [@multicast1]}, @cipso={0x86, 0x3e, 0x1, [{0x6, 0x2}, {0x2, 0x12, "a6c3072c10677d7bf5b8a5ca75a580bc"}, {0x5, 0xe, "bd139ea1b502bcb9ad80c08f"}, {0x5, 0xf, "5496796eec2dd587afb00eb7f2"}, {0x1, 0x7, "f1a6125314"}]}]}}, @payload_direct={{{{0x21, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, 0x2, 0x1f, 0x0, 0x3, 0xd, 0x4, 0x3, 0xbc0, 0x40, 0x4, 0x4e24, 0x4e23}, 0x1, 0x1}}, [0x0]}}}}}}, 0x125) syz_emit_ethernet(0x3c, &(0x7f00000000c0)={@local, @local, @void, {@arp={0x806, @generic={0x305, 0x8848, 0x6, 0xa, 0x9, @empty, "bbbf3950a07d181e0982", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, "5aa6cb415ca4aaace60bffb596e52db1"}}}}, &(0x7f0000000100)={0x1, 0x1, [0x4b2, 0x45b, 0x811, 0x481]}) 07:48:32 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x300, 0x0) 07:48:32 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 9) 07:48:32 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e6, 0x0) [ 1663.843098] FAULT_INJECTION: forcing a failure. [ 1663.843098] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.844864] CPU: 1 UID: 0 PID: 15475 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1663.844894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1663.844907] Call Trace: [ 1663.844914] [ 1663.844923] dump_stack_lvl+0xfa/0x120 [ 1663.844951] should_fail_ex+0x4d7/0x5e0 [ 1663.844989] ? __mpol_dup+0x75/0x390 [ 1663.845018] should_failslab+0xc2/0x120 [ 1663.845046] kmem_cache_alloc_noprof+0x5f/0x470 [ 1663.845085] __mpol_dup+0x75/0x390 [ 1663.845114] ? __pfx___mpol_dup+0x10/0x10 [ 1663.845146] ? lock_is_held_type+0x9e/0x120 [ 1663.845183] mbind_range+0x2b2/0x570 [ 1663.845217] do_mbind+0x7b4/0xd70 [ 1663.845255] ? __pfx_do_mbind+0x10/0x10 [ 1663.845285] ? ksys_write+0x187/0x240 [ 1663.845316] ? lock_release+0xc8/0x290 [ 1663.845344] ? __mutex_unlock_slowpath+0x157/0x650 [ 1663.845373] ? __pfx_get_nodes+0x10/0x10 [ 1663.845396] ? __fget_files+0x20d/0x3b0 [ 1663.845434] kernel_mbind+0x1e7/0x200 [ 1663.845467] ? __pfx_kernel_mbind+0x10/0x10 [ 1663.845507] do_syscall_64+0xbf/0x360 [ 1663.845531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.845554] RIP: 0033:0x7f692318bb19 [ 1663.845571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1663.845592] RSP: 002b:00007f6920701188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1663.845613] RAX: ffffffffffffffda RBX: 00007f692329ef60 RCX: 00007f692318bb19 [ 1663.845628] RDX: 0000000000000004 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 1663.845641] RBP: 00007f69207011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1663.845654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1663.845667] R13: 00007ffc924bcd3f R14: 00007f6920701300 R15: 0000000000022000 [ 1663.845697] [ 1664.259503] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:48:43 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) (fail_nth: 30) 07:48:43 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4020940d, 0x0) 07:48:43 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x200602, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x25, 0xc7, 0x6f, 0x0, 0xfffffffffffffffb, 0x40, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x200, 0x4}, 0x84a, 0x10000, 0xf1152d5, 0x8, 0x100000001, 0x8000, 0x3ec7, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xc, r1, 0xb43daa2154262ad9) 07:48:43 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448e7, 0x0) 07:48:43 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x0, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:48:43 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x500, 0x0) 07:48:43 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 10) 07:48:43 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000980)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRESHEX, @ANYBLOB="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"/387, @ANYRESDEC=r0], 0x0) r2 = msgget$private(0x0, 0x124) msgctl$IPC_RMID(r2, 0x0) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000540)={0x1, "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"}, 0x401, 0x0) msgctl$IPC_RMID(r3, 0x0) msgrcv(r3, &(0x7f0000000000)={0x0, ""/126}, 0x86, 0x1, 0x800) [ 1674.498714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1674.508153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1674.513616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1674.537858] FAULT_INJECTION: forcing a failure. [ 1674.537858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1674.539507] CPU: 1 UID: 0 PID: 15493 Comm: syz-executor.0 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1674.539533] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1674.539544] Call Trace: [ 1674.539550] [ 1674.539557] dump_stack_lvl+0xfa/0x120 [ 1674.539583] should_fail_ex+0x4d7/0x5e0 [ 1674.539616] _copy_to_user+0x32/0xd0 [ 1674.539641] simple_read_from_buffer+0xe0/0x180 [ 1674.539668] proc_fail_nth_read+0x189/0x270 [ 1674.539697] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1674.539725] ? security_file_permission+0x22/0x90 [ 1674.539748] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1674.539775] vfs_read+0x1eb/0xbe0 [ 1674.539806] ? __pfx_vfs_read+0x10/0x10 [ 1674.539834] ? lock_release+0xc8/0x290 [ 1674.539858] ? __fget_files+0x20d/0x3b0 [ 1674.539892] ksys_read+0x121/0x240 [ 1674.539918] ? __pfx_ksys_read+0x10/0x10 [ 1674.539951] do_syscall_64+0xbf/0x360 [ 1674.539973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.539992] RIP: 0033:0x7f466f02f69c [ 1674.540006] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1674.540030] RSP: 002b:00007f466c5f2170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1674.540049] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f466f02f69c [ 1674.540061] RDX: 000000000000000f RSI: 00007f466c5f21e0 RDI: 0000000000000003 [ 1674.540072] RBP: 00007f466c5f21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1674.540083] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000002 [ 1674.540095] R13: 00007ffc74fe73cf R14: 00007f466c5f2300 R15: 0000000000022000 [ 1674.540120] 07:48:43 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40049409, 0x0) 07:48:43 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:48:43 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:48:43 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 11) 07:48:43 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x600, 0x0) [ 1674.753471] FAULT_INJECTION: forcing a failure. [ 1674.753471] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.755426] CPU: 0 UID: 0 PID: 15513 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1674.755461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1674.755475] Call Trace: [ 1674.755484] [ 1674.755494] dump_stack_lvl+0xfa/0x120 [ 1674.755526] should_fail_ex+0x4d7/0x5e0 [ 1674.755569] ? sp_alloc+0x25/0x160 [ 1674.755602] should_failslab+0xc2/0x120 [ 1674.755626] kmem_cache_alloc_noprof+0x5f/0x470 [ 1674.755659] ? find_held_lock+0x2b/0x80 [ 1674.755694] ? current_cpuset_is_being_rebound+0xf6/0x370 [ 1674.755732] ? lock_release+0xc8/0x290 [ 1674.755760] sp_alloc+0x25/0x160 [ 1674.755795] mpol_set_shared_policy+0xae/0x8b0 [ 1674.755831] ? __mpol_dup+0x1cb/0x390 [ 1674.755864] ? __pfx___mpol_dup+0x10/0x10 [ 1674.755898] ? __pfx_shmem_set_policy+0x10/0x10 [ 1674.755927] shm_set_policy+0xb7/0xf0 [ 1674.755958] ? __pfx_shm_set_policy+0x10/0x10 [ 1674.755991] mbind_range+0x33d/0x570 [ 1674.756038] do_mbind+0x7b4/0xd70 [ 1674.756082] ? __pfx_do_mbind+0x10/0x10 [ 1674.756116] ? ksys_write+0x187/0x240 [ 1674.756152] ? lock_release+0xc8/0x290 [ 1674.756182] ? __mutex_unlock_slowpath+0x157/0x650 [ 1674.756216] ? __pfx_get_nodes+0x10/0x10 [ 1674.756243] ? __fget_files+0x20d/0x3b0 [ 1674.756287] kernel_mbind+0x1e7/0x200 [ 1674.756325] ? __pfx_kernel_mbind+0x10/0x10 [ 1674.756372] do_syscall_64+0xbf/0x360 [ 1674.756400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.756425] RIP: 0033:0x7f692318bb19 [ 1674.756445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1674.756469] RSP: 002b:00007f6920701188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1674.756494] RAX: ffffffffffffffda RBX: 00007f692329ef60 RCX: 00007f692318bb19 [ 1674.756510] RDX: 0000000000000004 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 1674.756526] RBP: 00007f69207011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1674.756541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1674.756556] R13: 00007ffc924bcd3f R14: 00007f6920701300 R15: 0000000000022000 [ 1674.756589] [ 1675.332898] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1675.396710] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1675.398129] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1675.400733] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1675.404001] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:48:53 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3002, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:48:53 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d3, 0x0) 07:48:53 executing program 2: getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000040)=0x8) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac2814aaffffffff00000000389dbca8bbc5183e4f3728cec469c8bff4a52b2ed3c003e8a7776847f878c3d62f28b3a21abadadf46a00a4168f267351e35c6d31d5eed4adfd8ede946144392bc9d6064545de1e92aae252ba81e8c730709d762ea7696c796169dab7afc818dd293f049e3da96775ce74f47a01ecbeeca", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344}, 0x7, 0x5) syz_emit_ethernet(0xc0, &(0x7f00000000c0)={@local, @empty, @void, {@mpls_mc={0x8848, {[{0x9, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x5}, {0x9, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x1f, 0x0, 0x1}, {0x6}, {0x2, 0x0, 0x1}, {0x1000, 0x0, 0x1}], @ipv4=@tcp={{0x11, 0x4, 0x1, 0x18, 0x8e, 0x64, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x44, 0x5, "4d41a0"}, @ra={0x94, 0x4}, @end, @timestamp_addr={0x44, 0x24, 0x61, 0x1, 0x4, [{@multicast2, 0xb}, {@rand_addr=0x64010102, 0x1}, {@broadcast, 0x1}, {@remote, 0x9a55}]}]}}, {{0x4e23, 0x4e23, 0x41424344, r0, 0x0, 0x0, 0x6, 0x10, 0x3, 0x0, 0x1, {[@mss={0x2, 0x4, 0x1000}]}}, {"43c2edd08b95e5720e8c66be55e884cf6de252f0ab6864500ee53dddfe31b69bbbbeb2b7f28fa1893a3fa50639375fd14914"}}}}}}}, &(0x7f0000000180)={0x1, 0x3, [0x409, 0x76a, 0xdc1, 0x405]}) 07:48:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3e}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0xff}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x83}, @NL80211_ATTR_AP_ISOLATE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24044800}, 0x801) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000180)={0x7, 0x0, 0x5, 0x3, 0x5, [{0x7, 0x6, 0x1ff, '\x00', 0x280}, {0x100000000, 0xfffffffffffffff9, 0x7, '\x00', 0x204}, {0x1, 0x51fe, 0x8, '\x00', 0xc}, {0x800, 0x4, 0x3d, '\x00', 0x500}, {0x9, 0xf06, 0x26, '\x00', 0x3}]}) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x100) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r1, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x54}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x140}, 0x880) 07:48:53 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x700, 0x0) 07:48:53 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 12) 07:48:53 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40086602, 0x0) 07:48:53 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x0, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) [ 1684.200828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1684.204910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1684.209375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:48:53 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3003, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:48:53 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, 0x0) 07:48:53 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3004, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:48:53 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 13) 07:48:53 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaac4aa000800450000280000000000069078ac2814aaffffffff00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0xe0, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @multicast, @val={@val={0x9100, 0x0, 0x0, 0x1}, {0x8100, 0x4, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xff, 0x0, '3/', "5f23974fea5c56e9584cbc926a09592039efbe5265982366b3439244110a7cbe432e3d089949dad6c529b1a679e42396c902e23e5852013d9ed6469be1f3c1833aeb8309d06ff95b78179efcfd38a251e7a8f8af05d6b336b4652b5ccff5dbae5f73b472993f1efd32ff9ab194337bd7d36af671388e05c6fa844b3eea9f9402e72262078f4bc77ec77e64b7ecdfacc7736fc28d60be98dc5c67cc99d792dc24d23382da88260a357191fb81dbc32c537c6528d8e275ad7118abdcbf37b4f4cc3274352d524f"}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x3da, 0x5ec, 0x27b, 0xcac]}) 07:48:53 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xf000, 0x0) 07:48:53 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d5, 0x0) 07:48:53 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x40087602, 0x0) 07:48:53 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3005, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) [ 1684.397537] FAULT_INJECTION: forcing a failure. [ 1684.397537] name failslab, interval 1, probability 0, space 0, times 0 [ 1684.398584] CPU: 1 UID: 0 PID: 15555 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1684.398600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1684.398608] Call Trace: [ 1684.398612] [ 1684.398617] dump_stack_lvl+0xfa/0x120 [ 1684.398636] should_fail_ex+0x4d7/0x5e0 [ 1684.398660] ? __mpol_dup+0x75/0x390 [ 1684.398677] should_failslab+0xc2/0x120 [ 1684.398688] kmem_cache_alloc_noprof+0x5f/0x470 [ 1684.398710] __mpol_dup+0x75/0x390 [ 1684.398726] ? __pfx___mpol_dup+0x10/0x10 [ 1684.398741] ? kmem_cache_alloc_noprof+0x352/0x470 [ 1684.398756] ? find_held_lock+0x2b/0x80 [ 1684.398773] ? current_cpuset_is_being_rebound+0xc0/0x370 [ 1684.398792] ? lock_release+0xc8/0x290 [ 1684.398806] sp_alloc+0x48/0x160 [ 1684.398822] mpol_set_shared_policy+0xae/0x8b0 [ 1684.398839] ? __mpol_dup+0x1cb/0x390 [ 1684.398855] ? __pfx___mpol_dup+0x10/0x10 [ 1684.398871] ? __pfx_shmem_set_policy+0x10/0x10 [ 1684.398886] shm_set_policy+0xb7/0xf0 [ 1684.398902] ? __pfx_shm_set_policy+0x10/0x10 [ 1684.398917] mbind_range+0x33d/0x570 [ 1684.398935] do_mbind+0x7b4/0xd70 [ 1684.398956] ? __pfx_do_mbind+0x10/0x10 [ 1684.398972] ? ksys_write+0x187/0x240 [ 1684.398990] ? lock_release+0xc8/0x290 [ 1684.399004] ? __mutex_unlock_slowpath+0x157/0x650 [ 1684.399024] ? __pfx_get_nodes+0x10/0x10 [ 1684.399038] ? __fget_files+0x20d/0x3b0 [ 1684.399059] kernel_mbind+0x1e7/0x200 [ 1684.399077] ? __pfx_kernel_mbind+0x10/0x10 [ 1684.399098] do_syscall_64+0xbf/0x360 [ 1684.399112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1684.399125] RIP: 0033:0x7f692318bb19 [ 1684.399134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1684.399146] RSP: 002b:00007f6920701188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1684.399157] RAX: ffffffffffffffda RBX: 00007f692329ef60 RCX: 00007f692318bb19 [ 1684.399165] RDX: 0000000000000004 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 1684.399173] RBP: 00007f69207011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1684.399180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1684.399188] R13: 00007ffc924bcd3f R14: 00007f6920701300 R15: 0000000000022000 [ 1684.399204] 07:48:53 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d7, 0x0) 07:48:53 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3006, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) [ 1685.145531] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1685.146678] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1685.148314] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1685.149985] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1686.959284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1686.961654] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1686.965492] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1686.970249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1686.974059] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1688.998164] Bluetooth: hci1: command tx timeout [ 1691.046270] Bluetooth: hci1: command tx timeout [ 1693.093115] Bluetooth: hci1: command tx timeout [ 1695.141270] Bluetooth: hci1: command tx timeout [ 1699.173308] Bluetooth: hci2: command 0x0406 tx timeout [ 1702.774751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1702.775873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1702.838004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1702.839410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:49:20 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x401c5820, 0x0) 07:49:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000040)={0xa, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x7, 0x80, 0x1, 0x8000, {{0x42, 0x4, 0x2, 0x39, 0x108, 0x65, 0x0, 0x31, 0x4, 0x0, @loopback, @remote, {[@end, @timestamp_prespec={0x44, 0xc, 0xf8, 0x3, 0xc, [{@broadcast, 0x8}]}, @cipso={0x86, 0x39, 0x3, [{0x6, 0x4, "c249"}, {0x7, 0x11, "3b91ad6c2de539a29adf058686027e"}, {0x1, 0x9, "313580cfbcc121"}, {0x2, 0xc, "aef6bf055488f74a4fa7"}, {0x7, 0x9, "c6c9e335d9e3ca"}]}, @cipso={0x86, 0x46, 0x1, [{0x2, 0x4, "9d52"}, {0x6, 0xc, "9c95486ac3689f5df02b"}, {0x0, 0x3, "9b"}, {0x5, 0xb, "57105c0cc13f082f32"}, {0x1, 0x12, "50fbe92bc233a3968a70bf3885ce0858"}, {0x7, 0x10, "c3ea4b5842107db1aca96a1f944a"}]}, @generic={0x88, 0xd, "0fb1b916ab9315562291be"}, @timestamp_prespec={0x44, 0x4c, 0x5b, 0x3, 0x4, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x3}, {@remote, 0x10001}, {@private=0xa010101, 0x4}, {@remote, 0x3ff}, {@private=0xa010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x401}, {@remote, 0x8}, {@multicast2, 0x24e6}]}, @timestamp_prespec={0x44, 0xc, 0x23, 0x3, 0x4, [{@empty, 0x5}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6_vti0\x00', r1, 0x2, 0x0, 0x7f, 0x800, 0x53, @empty, @remote, 0x8008, 0x10, 0x7fffffff, 0x5}}) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac2814aaffffffff00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="206aa530911e5c1b16000000000000228cd09d36dcf9fd04d633f8e227c1be6df510ad7dcd2d249aa188f6dfe2b3e2ec56b29c6a0edfbc1269a24f51902f3d60ca63dac3b46ae4939525020ece3616e2c3c75f844aef2b1487e2fc35a97c8fda423061f97debc82988da6786fbe586bb924d583e95a205504d8f"], 0x0) syz_emit_ethernet(0x12a, &(0x7f00000000c0)={@multicast, @remote, @void, {@mpls_mc={0x8848, {[{0xffc00}, {0x4}], @ipv4=@udp={{0x1e, 0x4, 0x1, 0x12, 0x114, 0x64, 0x0, 0xba, 0x11, 0x0, @loopback, @multicast2, {[@rr={0x7, 0x1b, 0x35, [@broadcast, @multicast2, @multicast2, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x1d}]}, @lsrr={0x83, 0x3, 0xf1}, @end, @rr={0x7, 0xf, 0x8e, [@dev={0xac, 0x14, 0x14, 0x26}, @private=0xa010102, @multicast1]}, @cipso={0x86, 0x33, 0x0, [{0x0, 0xc, "178a242ca94344aa03ad"}, {0x7, 0x3, 'l'}, {0x1, 0x9, "46d7a6add47df4"}, {0x0, 0x2}, {0x7, 0x3, 't'}, {0x1, 0x8, "60445536cf55"}, {0x5, 0x8, "a70800bc032d"}]}]}}, {0x4e22, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "c56a4c7c87bb3723e3527f24f8e3be5ee434013645a8dc038443899d9ea9d001", "c2ca9c2fdcd849b53887773de3f073947aa439729c5b27244cf81fb693dfa2506699d5cb09cec1f770cb44545a633dd8", "5e071b6b594560578bb742365ab1540c2e091a46ce92b59294dfd0f2", {"827059372c391d4ce17a33f1539c142a", "286609ea548849ebc998d42b25811287"}}}}}}}}, &(0x7f0000000200)={0x0, 0x3, [0xbe, 0x290, 0x8c5, 0x289]}) 07:49:20 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) 07:49:20 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xb0ff20, 0x0) 07:49:20 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 14) 07:49:20 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x0, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:49:20 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3007, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:49:20 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa4210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) r1 = gettid() ioprio_get$pid(0x2, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x7, 0xff, 0x2, 0x7, 0x0, 0x7, 0x8000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x40, 0x7, @perf_config_ext={0x6, 0x2}, 0x80, 0x9ab, 0xfffffffd, 0x7, 0x0, 0x4, 0x3a, 0x0, 0x3, 0x0, 0x58}, r1, 0x4, r2, 0x2) [ 1711.668672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1711.670808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1711.672628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:49:20 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3028, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:49:20 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8002, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:49:20 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 15) 07:49:20 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80086601, 0x0) 07:49:21 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x4020940d, 0x0) [ 1711.853766] FAULT_INJECTION: forcing a failure. [ 1711.853766] name failslab, interval 1, probability 0, space 0, times 0 [ 1711.854755] CPU: 1 UID: 0 PID: 16070 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1711.854771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1711.854778] Call Trace: [ 1711.854783] [ 1711.854788] dump_stack_lvl+0xfa/0x120 [ 1711.854805] should_fail_ex+0x4d7/0x5e0 [ 1711.854827] ? __mpol_dup+0x75/0x390 [ 1711.854844] should_failslab+0xc2/0x120 [ 1711.854856] kmem_cache_alloc_noprof+0x5f/0x470 [ 1711.854877] __mpol_dup+0x75/0x390 [ 1711.854892] ? __pfx___mpol_dup+0x10/0x10 [ 1711.854909] ? lock_is_held_type+0x9e/0x120 [ 1711.854930] mbind_range+0x2b2/0x570 [ 1711.854948] do_mbind+0x7b4/0xd70 [ 1711.854968] ? __pfx_do_mbind+0x10/0x10 [ 1711.854984] ? ksys_write+0x187/0x240 [ 1711.855002] ? lock_release+0xc8/0x290 [ 1711.855022] ? __mutex_unlock_slowpath+0x157/0x650 [ 1711.855037] ? __pfx_get_nodes+0x10/0x10 [ 1711.855050] ? __fget_files+0x20d/0x3b0 [ 1711.855071] kernel_mbind+0x1e7/0x200 [ 1711.855089] ? __pfx_kernel_mbind+0x10/0x10 [ 1711.855107] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1711.855128] do_syscall_64+0xbf/0x360 [ 1711.855141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.855153] RIP: 0033:0x7f692318bb19 [ 1711.855163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1711.855174] RSP: 002b:00007f6920701188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1711.855187] RAX: ffffffffffffffda RBX: 00007f692329ef60 RCX: 00007f692318bb19 [ 1711.855195] RDX: 0000000000000004 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 1711.855202] RBP: 00007f69207011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1711.855209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1711.855216] R13: 00007ffc924bcd3f R14: 00007f6920701300 R15: 0000000000022000 [ 1711.855231] [ 1712.593817] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1712.595362] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:49:31 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8003, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:49:31 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80087601, 0x0) 07:49:31 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x0, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:49:31 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d3, 0x0) 07:49:31 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 16) 07:49:31 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x110, &(0x7f0000000140)={@random="b963d66c80b0", @remote, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@generic={0x88ca, "8b840ba3462fc72586372431be26b89b61649003a9ac18cca830a2844dae374827b456912f423f1ce793ac229a039b256244f753e8da0a2fa0d12487367fa661c268cfa74957b9f3be514427af8eea69d509b38d2f247336eb11acffe98522b074d41e834603cc1a166dcfde752d770e7b8c35fbf235d4db6f06c9a60d47313e81782adfcce00f0304048750f868b0032db821f47e011eb472c0deba2cbceb936611bed76bc79111751b43731a2e20e283ba722a5cc90892e1e0f5976ecf3acc3372c3753d1488e0d542df16bcf2941ad864bfafa8ced005778613b6d146a5a0cb35d5c252a59c578b00294b6b97a77a6d534def76110aa1bf98c9c2dfae"}}}, &(0x7f0000000000)={0x1, 0x3, [0xa4b, 0xbda, 0xf49, 0xce3]}) 07:49:31 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xc0ff20, 0x0) 07:49:31 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x20, 0x537, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1f, 0x8, 0x0, 0x3, 0x0, 0x5, 0x8604, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x9600, 0xfffffffffffffffa, 0x8, 0x2, 0x3, 0x100, 0x6, 0x0, 0x1, 0x0, 0x9}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000000c0)="d6291cd270363bd7fccadfadb623fc174fcdf8e5f58e36fc30f16911b7ff84fbf651748bdbd5a8a394792ccb6b69fab295034a498f2518929c0df6037e97f4d0fd046f9b594c8871bb12b01971e0dd99f00a0833ff2b76e33e2df54a1eb7cf5b8b48edd8c9b1152a87ab2c2f834c4fe67bccce3d76a6272d8594b8f85a889f0c4f42b6bd8c21683927ffdbbd2bb6f5f00c3638dd8b5161ddf454ebf54e87056ff5372c90ff4f57304deb7b7904b7cc6d678c8ef5e6a402919bf77ab47ee41f0868f886f5d8c9322fce74348842656ebf145e78d5dca5", 0xd6}, {&(0x7f00000001c0)="f3683c2c7a249c7ebc0895c603c9b7dbac374f07f1e67216c1c15b7568435cc81fa7a6d6936994c5e0357c0f1138f63a8d0cf874909d99661e71883f3d7356339b1a4bfbf5f4d990026f9339fbf51d4fa076964425ff4531b65814b7ac42efac844d6c2961e06d4fe22a86266668bd83b4d3cce9be1bc7eafb1dd364a6a76e3647d68a7577fd294b0d2f554e37e7b53b44aedb37bf26260f6b1843eecd9c8013160910816dc73c679ed520643624", 0xae}], 0x2) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) [ 1722.743004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1722.766414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1722.777435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:49:32 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xd0ff20, 0x0) 07:49:32 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, 0x0) 07:49:32 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8004, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:49:32 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 17) 07:49:32 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x9d, &(0x7f0000000000)={@multicast, @empty, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x7, 0x27, "3775e855ee8d4df0a3bb47bd3b46ac9452bb24c03d267d74ad1fc7034f03ee1c99d61d1e5be28ac7cef1fc720a9885582a07665459f4fcc0df51359b1cc045d37251fe12b86c135e9a1028da9558729ddefaea0bd00c7da9b108ea06c6b4eba4288e648dae258366945ceff37fdaf8572e35fae819d76dc01770b57f61bce453df5242c72af78af3"}}}}, 0x0) 07:49:32 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80108906, 0x0) 07:49:32 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xf0ffff, 0x0) [ 1722.953235] FAULT_INJECTION: forcing a failure. [ 1722.953235] name failslab, interval 1, probability 0, space 0, times 0 [ 1722.954990] CPU: 1 UID: 0 PID: 16107 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1722.955019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1722.955038] Call Trace: [ 1722.955045] [ 1722.955054] dump_stack_lvl+0xfa/0x120 [ 1722.955083] should_fail_ex+0x4d7/0x5e0 [ 1722.955120] ? sp_alloc+0x25/0x160 [ 1722.955149] should_failslab+0xc2/0x120 [ 1722.955169] kmem_cache_alloc_noprof+0x5f/0x470 [ 1722.955198] ? find_held_lock+0x2b/0x80 [ 1722.955228] ? current_cpuset_is_being_rebound+0xf6/0x370 [ 1722.955261] ? lock_release+0xc8/0x290 [ 1722.955285] sp_alloc+0x25/0x160 [ 1722.955315] mpol_set_shared_policy+0xae/0x8b0 [ 1722.955346] ? __mpol_dup+0x1cb/0x390 [ 1722.955375] ? __pfx___mpol_dup+0x10/0x10 [ 1722.955405] ? __pfx_shmem_set_policy+0x10/0x10 [ 1722.955429] shm_set_policy+0xb7/0xf0 [ 1722.955456] ? __pfx_shm_set_policy+0x10/0x10 [ 1722.955484] mbind_range+0x33d/0x570 [ 1722.955518] do_mbind+0x7b4/0xd70 [ 1722.955555] ? __pfx_do_mbind+0x10/0x10 [ 1722.955585] ? ksys_write+0x187/0x240 [ 1722.955617] ? lock_release+0xc8/0x290 [ 1722.955642] ? __mutex_unlock_slowpath+0x157/0x650 [ 1722.955671] ? __pfx_get_nodes+0x10/0x10 [ 1722.955695] ? __fget_files+0x20d/0x3b0 [ 1722.955732] kernel_mbind+0x1e7/0x200 [ 1722.955765] ? __pfx_kernel_mbind+0x10/0x10 [ 1722.955799] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 1722.955851] do_syscall_64+0xbf/0x360 [ 1722.955875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.955897] RIP: 0033:0x7f692318bb19 [ 1722.955914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1722.955936] RSP: 002b:00007f6920701188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1722.955957] RAX: ffffffffffffffda RBX: 00007f692329ef60 RCX: 00007f692318bb19 [ 1722.955971] RDX: 0000000000000004 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 1722.955985] RBP: 00007f69207011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1722.955998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1722.956011] R13: 00007ffc924bcd3f R14: 00007f6920701300 R15: 0000000000022000 [ 1722.956040] 07:49:32 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8005, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) [ 1723.571818] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:49:41 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8006, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:49:41 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = gettid() ioprio_get$pid(0x2, r2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0xfa, 0x20, 0x0, 0x100, 0x80004, 0x19, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000000), 0x3}, 0x2200, 0x1, 0x1, 0x7, 0x50dd5a75, 0xcbb, 0x400, 0x0, 0x1, 0x0, 0x1}, r2, 0x3, r3, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 07:49:41 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80108907, 0x0) 07:49:41 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 18) 07:49:41 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d5, 0x0) 07:49:41 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x0, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:49:41 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x1000000, 0x0) [ 1732.104779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1732.121004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1732.136861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:49:41 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x2000000, 0x0) 07:49:41 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 19) 07:49:41 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8007, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:49:41 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80111500, 0x0) [ 1732.234582] FAULT_INJECTION: forcing a failure. [ 1732.234582] name failslab, interval 1, probability 0, space 0, times 0 [ 1732.236294] CPU: 0 UID: 0 PID: 16140 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1732.236323] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1732.236336] Call Trace: [ 1732.236344] [ 1732.236352] dump_stack_lvl+0xfa/0x120 [ 1732.236381] should_fail_ex+0x4d7/0x5e0 [ 1732.236418] ? __mpol_dup+0x75/0x390 [ 1732.236447] should_failslab+0xc2/0x120 [ 1732.236468] kmem_cache_alloc_noprof+0x5f/0x470 [ 1732.236507] __mpol_dup+0x75/0x390 [ 1732.236535] ? __pfx___mpol_dup+0x10/0x10 [ 1732.236563] ? kmem_cache_alloc_noprof+0x352/0x470 [ 1732.236590] ? find_held_lock+0x2b/0x80 [ 1732.236621] ? current_cpuset_is_being_rebound+0xc0/0x370 [ 1732.236654] ? lock_release+0xc8/0x290 [ 1732.236678] sp_alloc+0x48/0x160 [ 1732.236708] mpol_set_shared_policy+0xae/0x8b0 [ 1732.236739] ? __mpol_dup+0x1cb/0x390 [ 1732.236767] ? __pfx___mpol_dup+0x10/0x10 [ 1732.236802] ? __pfx_shmem_set_policy+0x10/0x10 [ 1732.236828] shm_set_policy+0xb7/0xf0 [ 1732.236855] ? __pfx_shm_set_policy+0x10/0x10 [ 1732.236884] mbind_range+0x33d/0x570 [ 1732.236918] do_mbind+0x7b4/0xd70 [ 1732.236955] ? __pfx_do_mbind+0x10/0x10 [ 1732.236985] ? ksys_write+0x187/0x240 [ 1732.237017] ? lock_release+0xc8/0x290 [ 1732.237049] ? __mutex_unlock_slowpath+0x157/0x650 [ 1732.237079] ? __pfx_get_nodes+0x10/0x10 [ 1732.237102] ? __fget_files+0x20d/0x3b0 [ 1732.237140] kernel_mbind+0x1e7/0x200 [ 1732.237173] ? __pfx_kernel_mbind+0x10/0x10 [ 1732.237214] do_syscall_64+0xbf/0x360 [ 1732.237238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.237261] RIP: 0033:0x7f692318bb19 [ 1732.237277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1732.237298] RSP: 002b:00007f6920701188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1732.237319] RAX: ffffffffffffffda RBX: 00007f692329ef60 RCX: 00007f692318bb19 [ 1732.237334] RDX: 0000000000000004 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 1732.237347] RBP: 00007f69207011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1732.237360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1732.237373] R13: 00007ffc924bcd3f R14: 00007f6920701300 R15: 0000000000022000 [ 1732.237403] 07:49:41 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x800a, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) 07:49:41 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x3000000, 0x0) [ 1732.983624] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1732.984748] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1734.959270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1734.962448] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1734.965474] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1734.968811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1734.971197] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1737.061132] Bluetooth: hci1: command tx timeout [ 1739.109418] Bluetooth: hci1: command tx timeout [ 1741.157146] Bluetooth: hci1: command tx timeout [ 1743.205205] Bluetooth: hci1: command tx timeout [ 1751.154610] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1751.156228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1751.189558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1751.190737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:50:08 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x4000000, 0x0) 07:50:08 executing program 3: fork() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) 07:50:08 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x801c581f, 0x0) 07:50:08 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 20) 07:50:08 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0x9, 0x202, 0x0) 07:50:08 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d7, 0x0) 07:50:08 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:50:08 executing program 2: syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaa0d8a01aaaa0800450000280000000000069078ac2814aaffef74d37527311bd37fc35c01e09d29545fd21e470c0b1e939e9138f9b7057779d778133eccb1cb94212ad03ba701800000000000001b549a5c125a60dafdc9678121a860472e449d20c11212c9695460ef477a223e6f05db2837b6b013f19c0e88c7c52541c85237765ef6f283aa6f0e513de842c8bd8a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800001c76dba6d4ab7125b13773b719c180d895779454eee5a03aaf46cb54c7d3721adb95e5de9f6c9bbd6674644ce0fa4743749f16f572ad82d03634ffbc450b35b3da6c10d24c89242c5b390d25596f22487407"], 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2c, &(0x7f0000000100), 0x4) recvfrom(0xffffffffffffffff, &(0x7f00000000c0)=""/40, 0x28, 0x1, &(0x7f0000000100)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f00000004c0)='syz_tun\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000340), 0x9, 0x2000) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000380)={0x8, 0x2, 0x6, 0x1f, 0x9}) write$tun(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c120000790780009020401000107415caa4e7d03030713089ee85448e06f13069f1536e870af101cb916a2bd35934f9c8ea2b37cf9307d921932f056a450da0c0f38df9dd86b9cc0496d8876d17980645ae34037ddca34f251020473b9d7fa775602b5c5ebe88f580894070ae84bc72ad4e205caea5bddc5a1865d1f410bd6c56eb81f9d0b2f5da679b5c7705d089be9a30006ad9756af77bbd58a3c50b232"], 0x195) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000001c0)={0x2, 'veth1_to_batadv\x00', {0x7}, 0x8}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180), 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448c9, 0x0) write$bt_hci(r5, &(0x7f0000000200)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc9, 0x3f}}}, 0x7) syz_open_dev$mouse(&(0x7f0000000000), 0x1000, 0x103040) 07:50:08 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x5000000, 0x0) 07:50:08 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 21) [ 1759.620547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:50:08 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x6000000, 0x0) [ 1759.646253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:50:08 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0x9000000, 0x202, 0x0) [ 1759.661810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:50:08 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) [ 1759.687923] FAULT_INJECTION: forcing a failure. [ 1759.687923] name failslab, interval 1, probability 0, space 0, times 0 [ 1759.689761] CPU: 0 UID: 0 PID: 16647 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1759.689790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1759.689803] Call Trace: [ 1759.689810] [ 1759.689818] dump_stack_lvl+0xfa/0x120 [ 1759.689847] should_fail_ex+0x4d7/0x5e0 [ 1759.689884] ? vm_area_dup+0x25/0x6f0 [ 1759.689905] should_failslab+0xc2/0x120 [ 1759.689926] kmem_cache_alloc_noprof+0x5f/0x470 [ 1759.689965] vm_area_dup+0x25/0x6f0 [ 1759.689987] __split_vma+0x179/0xde0 [ 1759.690026] ? __pfx___split_vma+0x10/0x10 [ 1759.690058] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1759.690084] ? __mpol_equal+0xb0/0x330 [ 1759.690121] vma_modify+0xa9c/0x2030 [ 1759.690157] ? __pfx_vma_modify+0x10/0x10 [ 1759.690194] vma_modify_policy+0x1b0/0x250 [ 1759.690223] ? __pfx_vma_modify_policy+0x10/0x10 [ 1759.690274] mbind_range+0x17a/0x570 [ 1759.690307] do_mbind+0x7b4/0xd70 [ 1759.690345] ? __pfx_do_mbind+0x10/0x10 [ 1759.690375] ? ksys_write+0x187/0x240 [ 1759.690407] ? lock_release+0xc8/0x290 [ 1759.690434] ? __mutex_unlock_slowpath+0x157/0x650 [ 1759.690463] ? __pfx_get_nodes+0x10/0x10 [ 1759.690487] ? __fget_files+0x20d/0x3b0 [ 1759.690525] kernel_mbind+0x1e7/0x200 [ 1759.690558] ? __pfx_kernel_mbind+0x10/0x10 [ 1759.690598] do_syscall_64+0xbf/0x360 [ 1759.690623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1759.690645] RIP: 0033:0x7f692318bb19 [ 1759.690662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1759.690683] RSP: 002b:00007f6920701188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1759.690705] RAX: ffffffffffffffda RBX: 00007f692329ef60 RCX: 00007f692318bb19 [ 1759.690720] RDX: 0000000000000004 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 1759.690733] RBP: 00007f69207011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1759.690746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1759.690759] R13: 00007ffc924bcd3f R14: 00007f6920701300 R15: 0000000000022000 [ 1759.690788] 07:50:08 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80086601, 0x0) 07:50:08 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80811501, 0x0) 07:50:09 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80087601, 0x0) 07:50:09 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0x20ff9fff, 0x202, 0x0) 07:50:09 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x7000000, 0x0) [ 1760.508943] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1760.513842] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1760.514789] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1760.515793] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1760.517279] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1760.518918] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1760.520753] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1760.522654] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:50:20 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80108906, 0x0) 07:50:20 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0045878, 0x0) 07:50:20 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0x20ffa000, 0x202, 0x0) 07:50:20 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 22) 07:50:20 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x20ffb000, 0x0) 07:50:20 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x81, 0x81, 0xb9, 0x9, 0x0, 0x100000000, 0x80000, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0x9}, 0x1062, 0x2eb6, 0x3f, 0x5, 0x4, 0x1, 0x2000, 0x0, 0x5bd85faa, 0x0, 0x65}, 0x0, 0x0, r0, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 07:50:20 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @random="cc56d9dcb05c", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x5}, @timestamp={0x8, 0xa, 0x80000000, 0x9}, @exp_smc={0xfe, 0x6}, @nop]}}}}}}}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0xc0603d0f, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="b587141d73f4e6bca987deceb9bfe4d67b23dce98b174646068d9035bb3dad0d14e51de44bcbe2e8213dd6641529a40d36ab5eb0ae9303f85c723f0b0d667d4875858b58a08bec7dc47b8f67623c2c9895c239ace3ef85c31300a3a48f2bc5413d8b05083c1a3471cacaf4194a759689c126a49c92e4405bf39d548381e74ea46d255c43908cbf87191a3bd3a32064a94488de7bf6232dcc98c33ebee8dc9a2e403793bce81ab91103e99a1e36c6dec701ed5c6f96bb8020e2ec99a487ce8ea4", 0xc0}, {&(0x7f0000000200)="cb63292602bf508b79333685686ec0fa296768497fff", 0x16}], 0x2, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)=ANY=[@ANYBLOB="f066bd7e9a00", @ANYRES32=r0, @ANYBLOB="832a00000000002f66696c6530000000"]) fsync(r1) r2 = epoll_create(0xb1da) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000280), &(0x7f00000002c0)={'L+', 0x1}, 0x16, 0x0) write$tun(r0, &(0x7f0000000000)={@void, @void, @llc={@snap={0xaa, 0x0, "ee", "98397f", 0x6005, "00a21644a92321c6fbd50a370db4862330b3a5dfba657c2a92abda87efc7a47bb33173d0a9e678ef78f6da941f8e30d473d92578061f130002c76a0a4e3f4797bb0f5417cef8e416e177c4004f408697de3bfc7998338a13fcbb784c7923ebfa4ce76f0b2b6d2aeb8d06007f118c6b57e559bbd3a28733ef6566452764b9f06f1458b235ca4d35d7866d0f98639f09dd9d3e2d0a48dcbe5c747b274bf5fee491c85eb50e3805e62b6b1919a914ac2e5290ea5bdf03a737ca"}}}, 0xc0) 07:50:20 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) [ 1771.266233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1771.278441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1771.289550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:50:20 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0x20ffafff, 0x202, 0x0) 07:50:20 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaa00000000aaaaaaaa000800450022280000000000069078ac28d607ffffffff00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) syz_emit_ethernet(0x138, &(0x7f0000000180)={@empty, @remote, @val={@val={0x9100, 0x3, 0x0, 0x1}, {0x8100, 0x5, 0x1, 0x3}}, {@ipv4={0x800, @tipc={{0x3d, 0x4, 0x2, 0x7, 0x122, 0x68, 0x0, 0x7f, 0x6, 0x0, @multicast1, @loopback, {[@timestamp_prespec={0x44, 0x3c, 0x6d, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x1c}, 0x5}, {@rand_addr=0x64110101, 0x95}, {@local, 0x3}, {@empty, 0x1f}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x21}, 0xf50}, {@private=0xa010102, 0xffffff00}]}, @cipso={0x86, 0x6, 0x3}, @end, @timestamp={0x44, 0x14, 0x6c, 0x0, 0xf, [0x9, 0x8, 0x7, 0x8]}, @noop, @timestamp_addr={0x44, 0x44, 0xf8, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x5ec}, {@loopback}, {@multicast1, 0x9}, {@remote, 0x7}, {@remote, 0x20}, {@loopback, 0x1}, {@multicast2, 0x7}, {@multicast1, 0x7}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x66, 0x3, 0xc, [{@loopback, 0x9}, {@private=0xa010101, 0x2}, {@empty, 0x1ff}, {@empty, 0x401}, {@broadcast, 0xfffeffff}]}, @timestamp={0x44, 0x14, 0xca, 0x0, 0x3, [0x81, 0xfffffff7, 0x7, 0x0]}]}}, @payload_named={{{{{0x2e, 0x0, 0x0, 0x1, 0x1, 0xa, 0x2, 0x2, 0x6, 0x0, 0x1, 0x7, 0x3, 0x2, 0xe444, 0x20, 0x7, 0x4e23, 0x4e22}}, 0x3, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, &(0x7f00000002c0)={0x0, 0x1, [0xe8b, 0x84f, 0xcbe, 0x659]}) syz_emit_ethernet(0xd1, &(0x7f0000000000)={@local, @broadcast, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@generic={0x80f3, "b687d59435532b00cdf4edfec2ec26f41231c20112355f4b94beaf85c35f433132d9461af696f9d172500d7f806f23733082c3cb083cb10029c81fa2737ce33b85c61ba69093dbeae5b66d68c8908b85ea9cb820b02ec00319eaa8119c2a68dc438b75bd01504768ac3fde99b25b500921a800b58c1ff2ee4fec2df34ef31c85bbbfe3e8fdd3f70210345b5d2223430c195cefb113e3da4c29561150b05e16fd881f6df768963f0174a0900b480b766ec82c8fc72e4affe87621acf82ffe59"}}}, &(0x7f0000000140)={0x1, 0x3, [0xce9, 0xab3, 0x934, 0x2dc]}) 07:50:20 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0045878, 0x0) 07:50:20 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 23) 07:50:20 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x20ffc000, 0x0) 07:50:20 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80108907, 0x0) [ 1771.433288] FAULT_INJECTION: forcing a failure. [ 1771.433288] name failslab, interval 1, probability 0, space 0, times 0 [ 1771.435101] CPU: 1 UID: 0 PID: 16708 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1771.435132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1771.435146] Call Trace: [ 1771.435154] [ 1771.435162] dump_stack_lvl+0xfa/0x120 [ 1771.435193] should_fail_ex+0x4d7/0x5e0 [ 1771.435232] ? mas_alloc_nodes+0x432/0x8f0 [ 1771.435252] should_failslab+0xc2/0x120 [ 1771.435275] kmem_cache_alloc_noprof+0x5f/0x470 [ 1771.435307] ? lock_is_held_type+0x9e/0x120 [ 1771.435347] mas_alloc_nodes+0x432/0x8f0 [ 1771.435375] mas_node_count_gfp+0x106/0x140 [ 1771.435399] mas_preallocate+0x2af/0x690 [ 1771.435429] ? __pfx_mas_preallocate+0x10/0x10 [ 1771.435455] ? __create_object+0x59/0x80 [ 1771.435491] ? lockdep_init_map_type+0x4b/0x240 [ 1771.435524] __split_vma+0x304/0xde0 [ 1771.435557] ? __pfx___split_vma+0x10/0x10 [ 1771.435590] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1771.435618] ? __mpol_equal+0xb0/0x330 [ 1771.435657] vma_modify+0xa9c/0x2030 [ 1771.435694] ? __pfx_vma_modify+0x10/0x10 [ 1771.435732] vma_modify_policy+0x1b0/0x250 [ 1771.435763] ? __pfx_vma_modify_policy+0x10/0x10 [ 1771.435816] mbind_range+0x17a/0x570 [ 1771.435852] do_mbind+0x7b4/0xd70 [ 1771.435891] ? __pfx_do_mbind+0x10/0x10 [ 1771.435923] ? ksys_write+0x187/0x240 [ 1771.435955] ? lock_release+0xc8/0x290 [ 1771.435982] ? __mutex_unlock_slowpath+0x157/0x650 [ 1771.436011] ? __pfx_get_nodes+0x10/0x10 [ 1771.436044] ? __fget_files+0x20d/0x3b0 [ 1771.436084] kernel_mbind+0x1e7/0x200 [ 1771.436119] ? __pfx_kernel_mbind+0x10/0x10 [ 1771.436161] do_syscall_64+0xbf/0x360 [ 1771.436186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1771.436210] RIP: 0033:0x7f692318bb19 [ 1771.436228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1771.436250] RSP: 002b:00007f6920701188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1771.436274] RAX: ffffffffffffffda RBX: 00007f692329ef60 RCX: 00007f692318bb19 [ 1771.436303] RDX: 0000000000000004 RSI: 0000000000003000 RDI: 0000000020ffc000 [ 1771.436317] RBP: 00007f69207011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1771.436331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1771.436345] R13: 00007ffc924bcd3f R14: 00007f6920701300 R15: 0000000000022000 [ 1771.436375] 07:50:20 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000001280)={@broadcast, @random="29cec9843af5", @void, {@can={0xc, {{0x0, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "e1252c394998bdf4"}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv4={0x800, @igmp={{0xf, 0x4, 0x2, 0x11, 0x80, 0x68, 0x0, 0x80, 0x2, 0x0, @rand_addr=0x64010100, @empty, {[@lsrr={0x83, 0x17, 0x7a, [@dev={0xac, 0x14, 0x14, 0xf}, @loopback, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @ssrr={0x89, 0xf, 0x21, [@rand_addr=0x64010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {0x17, 0x1f, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, "d8c8147ec102f19fbf52233551ce80ca7d599bfa646bf7db286b9f9794ec5b14240f51a5476a6d83bf77ce0e0ea153f0365adb10df3ee1159ef23f76"}}}}}, &(0x7f0000001180)={0x1, 0x2, [0x432, 0x375, 0xfd, 0x4ac]}) syz_emit_ethernet(0x100e, &(0x7f0000000140)={@multicast, @remote, @void, {@generic={0x1, "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"}}}, &(0x7f0000000000)={0x0, 0x6, [0xf97, 0xe05, 0xf2a, 0xfe7]}) syz_emit_ethernet(0x56, &(0x7f00000011c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @local, @void, {@canfd={0xd, {{0x0, 0x1, 0x1}, 0x40, 0x2, 0x0, 0x0, "b72ba8e228b2c4722f9f39e2843b985dcf5e31e6b8ebeb275a569df4f148f12af6a9ae48bf340f46e82f8aa4c8e2f403189458cfb05d4e62168b32f820c136b0"}}}}, &(0x7f0000001240)={0x0, 0x4, [0x82f, 0xa7f, 0xde5, 0xe07]}) 07:50:20 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0x20ffb000, 0x202, 0x0) 07:50:20 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x20ffd000, 0x0) 07:50:20 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0189436, 0x0) [ 1772.147513] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1772.149468] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:50:30 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 24) 07:50:30 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80111500, 0x0) 07:50:30 executing program 2: syz_emit_ethernet(0xe5, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "2fc9", "1f212d", 0x10, "4e8555e75ab2ea4ade98b227fddaae71e3f892ff34a203be6fb3b9ef1c647bcad38fe2d587b5c48a9b331dc58f3c21b6461de828215ca49ae2a93d9109d3091673fbdb794e6d2ee39e9d8c34b835f5b050c036f2bbe891ce15a4a0703143bacda28fff6d248b0107450ef94e0d77077b3994cff37b14099e85c65729ca7b7941fb87ceb066e74d892809bac33195c2972c9f996319a9bb696f55d85c2f32140b9a8f823116371971a0257f0ffe7bd0491bb3885df6dc47ab351ea713638de4747466dfd621f829ff7b663dd521d2"}}}}}, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/4096, 0x1000, 0x10000, &(0x7f0000001100)=@phonet={0x23, 0x4, 0x20, 0x94}, 0x80) 07:50:30 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0x21000000, 0x202, 0x0) 07:50:30 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3}}}, @ver_80211n={0x0, 0xcf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="30b619d48548867a081ec2ed880c686b2fee530b54b69bc894c2394f0b48567943e619bb3753ab149ea31a7c88bdc5011c3e76a849281416b8bb1d54f5894cb18fc1788b7b90277785a836d546ce9a05981dd6c7a4ee578da4765ae7219b1b2e602726a1976b403d7feb57e3c72118af5b7cadb0deaf6a069373cebb5e4c113aa8aaf3cf9bf16683d661f9f081b5f338566c1b011c47bdee03e1ce5dbac9391ea06cc2326a5c2bf1f125ccc2eb922a8b6b33da62f47a4f6883d89b7b586602391ce17b9d567a23012e912085ba11278722dd4ec2c716ae5cd88317b718dde7a9892542c43986cdc489ad8814c4a922ee0dd1cec042398b3c5b587e6c6d9c748253594cbbaa26861ee41de2bcc48ca2247e006deffc8fda87ee1a381df52e267f1367e871c6098182fd0780c75a471fd6b139d729b0eab8538e6c3619a4ae23513e9d17719f2ce7cfcce7abff61aac656c68cdef06928e62e7baf45fdf492cb8419a4ff239b70e352f2e5b09b4bbd521d6d586fc8bff2e46e66a77377d309489e4f4b791622fbb704ff6a18ffdfcd9166086a54a9eaee49c74d9713f3843142ef314b665571b3a8400ca93139d0d6cb839a1b0b46efa13f5dac91e014fb5727862e5284b61dcf73217ee2ed5c8d32765ae2a23e90fb6cf778be6ebe561a583b9bb6932d61143baf2f1864dc2350bdfe61587599de3d4a2bb6c501d3e4cc2017b106499e10dee2515bcc540d7665b15972925f10f27067dd599e847fddd257609db34d23857946b92cf29a4b8dbfd16c301663de9adb6ed8405a8685ad3e847cea97328f40efb8788de95cb71adcabe40631e9e82d30d048ec586bc4af2348d8f70ddf606339f0a3ef4d3e9ccd0a5dfdfb726daf53da373877142b35bce3a13695048614a61b6a0782128123fb35990b64dcc5f4c33f361270c01cbf0e892c7f212881f6d03a1165cf70846c59c21e36db0d08120a43c8414db6669053d4ec052baac1bca2b130dfbf490475a73514068202db02636588d607954d9e4ba99e6d1f05d672d98261f0cddab85e3f0b0d909108d29549a9d22ab310e6c296ec89db9ecd1aa7033b683c1cdb92c4be76f6ac82e4e0ab938b2e"}, 0x354) 07:50:30 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xfffff000, 0x0) 07:50:30 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc020660b, 0x0) 07:50:30 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x220000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r5 = memfd_secret(0x80000) sendmmsg(r4, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="675cfeaa2b537eca", 0x8}, {&(0x7f0000000200)="aeb7006ee8917f0d4717160d1d07fbcbab68dcd40ac3baef414632b62df4505aada79a075c89003e7dec9d640e86b481e1f069e146254323187a", 0x3a}, {&(0x7f0000000240)="4e5d728c1e3fa2432ff62c2a9819aacebc7a2cf3d57b229c0ccb47298efeecf1d69b4ef4e0dff798025c34b03a1a262112360e42238729be50b9b551fd71fa8a", 0x40}, {&(0x7f0000000280)="feba6594f10a6bfee8f347c00aa9d57287488750b57b555b4042b5860be6daac811d6afcfc3609871ae8a5f7a5d01f4294bb11e05bb8f2059937f3b5629c7d781b732593be904286924df5ec5904e607c8676dcadc0d1af92d0ddd556bd5d84dd345c20b4e86e829ae49ab5b3bd122976aba3f251a2706abd02dd6d3", 0x7c}, {&(0x7f0000000300)="9ce19a1252e80f23bf85b8f95215d5e1ed759a2dda4b24dd2139", 0x1a}, {&(0x7f00000003c0)="a2009c83d93a1e1ec85627c40830ccd6401d36cf3d02b45ff6e67604e684bb9c", 0x20}, {&(0x7f0000000400)="16baa70d4cf7b595040ed1bf4ff3c509b3a8d7742d229e3aa5ffc6fb9cf6", 0x1e}], 0x7, &(0x7f00000004c0)}}, {{&(0x7f0000000500)=@in6={0xa, 0x4e20, 0x2, @private0, 0x7}, 0x80, &(0x7f0000000580)}}, {{&(0x7f00000005c0)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000640)="bde5eddfef04caf1e187cd9b9a2e92e34858872666f415ae957f8555c8c5e3ebb2b630ff59a32aaffba362258710a211f445637e9c5bf423978fadf4a4ca08effb7559e40f3e4fae61b29f9fe416a24cbf0acc705bdbb1fc1db2e52d446b56d1f0a63d31d7bfb7061088df96b773d5a4b53e5fc42a86893b25a4a13b1603f5c3f6", 0x81}, {&(0x7f0000000700)="473ce022350b98f89d45b4cf782a4eabec41c0f3d049fd669e879b61cf17c419ef466a0d9406a4153babaf276d5176de31fd23a615b353b43f2f614f8a9432ffb86aa9465dbfa2ac82bc16d319a4f13a", 0x50}], 0x2, &(0x7f0000005d00)=[{0xe0, 0x6, 0x800, "83d3d4f83194755e8e1548a6f89c08b406e448d6476c5669ca35c20f6445e738fdc08c6e9ce08fdbe9855231164f796019d2c580ed8eed5215c4292d7fd41ef4d61b47d30c4697dbb90603df090cc4ed3f427d2b546e4b5c177684829d9c8383df7c57c18915a2fbacdc9712c9f9a54acb6c58c59f64dd08fadf27cb2858a5e479f27846adf954bc6c482d104e77c1c67fc593d19761c97ae42fee668b0652bbd8e09eab1cfab6e728cd64f8e21cfb99fe19afaaabfe43259126aa230a3a4e029b7f3203cb4257312715e732f79ca13a"}, {0xf8, 0x88, 0x7, "6981823bde6c12bfcb0f758e24d71339f828b4656076207452988391819dc3e5a1b5367519407413b7d8e4ea2e6da3720a4fad669496a0c0d58857277aec62749a03434b8026cac08c55233e22eb6dd806825f570af0eba697019cbf7fc980e94b4ecd0cbe4bb2022092021108868eba34739800fd432134457ec06b962f37c39a90610991c845ada8a35b7a1669a59007891a7827b7f20e77f4216ed1fdb5c44818cfafe78439d0374aa7263178a328720a1481e0cb4b6d0727db2c7eaa85312b18c205a7c11f23f043cc3ac4ee01f5d2005bd06ad05833d4c243aca7aa8bf2d653f45775df"}, {0x28, 0x29, 0x4b7b, "07be5e77302f217e278575926cb9239ddad2111b"}, {0x70, 0x118, 0x1, "37c022193000048ab017dd6cad3ca0e7542a38f973ec35a5dfb3565bae06817dc7ac6220bc7505272e2146bfd6886f588a8d368df9e5ed4041e359af2b8b9e1a222ca9859e3cbf714719c8524c74948479ff5e664478da4aaacd"}, {0xe0, 0x113, 0x1ff, "8f297a3a089a702e60c4c52db6d3aba92de8950c2b0d6c1ec52bad85e62be31d5ecc90280e24c27195c15e57c8e3326bd692d62b9c3a560df48a0aa9564fdd5e5b612b4c3dff1f6772fef9c86cc8436a48f0716011915aeaf8d18017f62d771235c924457f6a922c69bd98ac8e83f010b1e3e19e67a06bce01b024777f7c14d4b049ba8308f65f67480f0056fe5024d99579473ccc55f2de3276b6e69241146d730838b08811352587f2e7039d4e44b21897db6586776f9cdf53494caff55ed7e5a7548722049f4d99a1414c02"}, {0x98, 0x119, 0x2, "f880b0d7bddd28753b94cda3a3bb30e4635998a5ecd2116093ec82b32a4614897c738336456501ec01582d520f11d81a025bca6d06017411b5bba0e42ca4ab7c6260445fb99fee005f0fabf35e0409c0ff87312f6dbb0bda6c1d769190a7fd5001d41d23d859c190aea51023c5efbb6d6aaa7ffceed36fe0f82511edf3359580b2730c8045ad2e99"}, {0x88, 0x114, 0xffffffe1, "41ec7f849f8d212c99df83addeac8f875839e3a72f329d50b9a5eaffc3d9f29cca0f8018d3537acaa3cf56c46c2693c10377915336e11b0801703feef2db7697eb2c10017f04a33ffc4b18723fb74f3794ac40aabec8813c6c6c1092e8c3964657c4a416cca9e35d19d03bd44e351dda12"}], 0x470}}, {{&(0x7f0000000c00)=@ethernet={0x1, @local}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000c80)="43eeb7fe990aa71fc0c6f9bc65c1d8a5837c88e8b90dd54e95e154b386177e59d4a758f88812a9978c4b04a603684efaab9733cb125f12f3c06369dc0eb9b23bc0d7748edb1e1585d5a117ad82a2e39211a26c", 0x53}, {&(0x7f0000000d00)="122d31e1319ec86898f3996d662a0d72f1ef9cbc3fdfe457171f2907d472bb62995a322eac5e21955a45e029e02ceedb162ec2c0f2d67f04ec2c15586ccf9ce36c1d4a3bbda1f442a00ae7503c6b4f7ec109c8ecf4fbf7f34ee39cf21aecdf74357fc707a2eebd366a1f5c2dccbafb9b27537c1993cb29e6c35c8d8d18a323374828e8bf66de45dcfc4ffbc5189d515ba2a91fa40cd8de9498e80dc5d4d878c7156367660f2fa31c5d3674d963a8263fa73a9dd517261abae9e63ad630cb6c0d12e0d048d72fe1ecb3bfa920cbcd9ad1a5b1b31c", 0xd4}, {&(0x7f0000000e00)="656bc7a6849db6d06ebafe1eaf50a3f49c098f46ae9a3b8dfbc5abb5f2d75a2c97b233eb989552b75059aa537844d3dd66053d2ab68f3ff06467feafe50c78b251e40c76cfb2cc2cfa734a1deecb50b7", 0x50}, {&(0x7f0000000e80)="e9960ed6e6cc1854fa175a50099df8ba8a40e3801aef3b25d9b51ff6e03f04735d44c627db77508993dbcb659f454475280b28952ddf2c6719ecb1e3b7655ef96398e0ed5cbf6c5a90b4fbd8843ee9dd2cdc727ae89451bc37e67ad28ca776359d7a0c9d43b05975c1c74213bcf16b84a835a9", 0x73}, {&(0x7f0000000f00)="f8f263c58f0c9cb88634b31c46edabcb42df0736bcd39ccab01f39ec6ab6de075aaf3c0e150519f63181d167e7324b70b052dc1b614a6e983ceb535661758c6352e21e202ceaac14fbb11f6a28b48279521717efea24f229bae4a2cafb4469805dcf6cea2e5fcd5ceaf621a3962f5d5f701a704c35aa94b60c89b9b29e484dc6b2fde0", 0x83}, {&(0x7f0000000fc0)="8f30abb9b4cec83bded69100952195ceb805f8050b1d622035f9c0d8b863f3690abcd9b991fecfbe9e307410c6f162a199c3d11516ca23cafbeda4826bc57a93cd3838dde38f3635081fcfc92459cb963bcf848701380a9c50f51a9f883c131c6dde83c9060d086156fec3137c29bdf9d779d38b8e0a4aa981afcda3b07f6937555dfc53d4e4a1f83d8e8cc1df57c18700ea", 0x92}, {&(0x7f0000001080)="cd092561e14b09e7aa257a0906ea0c4c06a66651065bd6c9cfd93eecdc53bf0fea0a0a699498", 0x26}, {&(0x7f00000010c0)="f9a6266ae837b16cf3b2d12e0c72872bf80b7e45fc0976f443a17b98ddb97e271e8e41505f2fbd0572218311bbfaa48311491ab74225cc526f023c703f4162477c16", 0x42}], 0x8, &(0x7f00000011c0)=[{0x30, 0x0, 0x0, "38c9e9f8faf8513e518598aa98d4afafe5c5896bc1953fb4a5"}, {0xd8, 0x112, 0xd9a, "512651860ff8dac8890bc440089f00fccba50a142e63ec5467783d2ce5b244afac965b622f7c69ecb8f0a9829495426e1e0f0ef169684a14b6e28d1dba66980d09ea8d225091239cc99c209e38dbed31d054312520d138617e7be4087c9ad2255efc7aced76af6a6ad913b78ec5ee4ffbb07bb65e5ce3bdbbee282aab8f2e416e9bf808efaa3c293bd43a266e66212f13a1b874ebbc2095a605356b69892ee906d5a2bc036ca207038163894c3057ab025bce2ee6dbe78e5f03bfbbb58f16f991b27bb51"}, {0x28, 0x10e, 0x10, "8cb384ba73edc21b5dc392eaafd333c90c0bfa0c"}, {0xc0, 0x114, 0xfffffffe, "18bc67050711fcb0ec9f9a09b7b225a63709afe9c27079c91161f8ee8c7bebb21168e755aee580124a15beb659f61428baaf6aed57dbe160cc58000bcd5d906cf97e75d13a38c07dfe0e4dbf62878d9a4d8b802f43eb29410278a94c97d9931f290cd8a82c53c5a1ea8d2c3dba610af103fcf41f2d13c553a426f90fb140b477b5b4943283eda6331aff7927764871e6e537c6a30c5bff6dc318d1fff0883cbceb23f121d68dbdb63fbd7b3c"}, {0x110, 0x10f, 0x3, "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"}, {0xd0, 0x116, 0x7ae, "f52daae6da36eae535bdd20746e6b944bff0dc2bd34569399003728a97635fe4a83a94c7120b94864212c06ef8a659e77c205088b01a1872ce6a48ded71984456386e579b05866e628b50d014b4428783f61c1f3955b181874fa1414a836ab22dfeeee763f18d4a7690e79813c77aa708bf8cdfa4a95247d281e9d82537cd29c32e7925d7fe1411e38247c8422d436d7dd3a3c3f7420eacfc02998e9f7746e9f12500b1f7883f810c7ee8b8850ca54d5fedca6e1c607a100047fc3443706"}, {0x1010, 0x108, 0x3, "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"}, {0x40, 0x10a, 0x3f, "47887e251e7e6d046999d3b8e7da8f824b8569f91811a8e0b51a025071c89dd124640042b2e0855f1a"}], 0x1420}}, {{&(0x7f0000002600)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x4, 0x4, 0x4}}, 0x80, &(0x7f0000004740)=[{&(0x7f0000002680)="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", 0x1000}, {&(0x7f0000003680)="1eb5fad0f6a510cbbec01ab4baf80c8170ed724ab0537b375cda79d8ed223d4b2784c29e17430368be05edc0ba89e75071b723316ad6e7598e1230cd188479bf7e04c0d1646126018eefec7855bab1ee63928fb6f3988cd32a4a8a5c44f9b1ca7411ef7fa3cd43b86b9cde5269d9b09fed4b0c2063a4d92cadf8a2ce19a94b2be8fdd84bd9dd729bd8dc98a1fdfd8bb16089df2aa176422ee2417004ea6c55a4d203b043842127603a4065d3196626", 0xaf}, {&(0x7f0000003740)="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", 0x1000}], 0x3, &(0x7f0000005b40)=[{0x190, 0x10f, 0x8001, "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"}], 0x190}}, {{&(0x7f0000004880)=@hci={0x1f, 0x1, 0x1ff0a7982c82cf90}, 0x80, &(0x7f0000005940)=[{&(0x7f0000004900)="0d4c3f96cdb36cbd68a76597dc8d2d8ff338b7a295c9c95724a588877cce38237293f8d3ee800d5a66834177959c", 0x2e}, {&(0x7f0000004940)="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", 0x1000}], 0x2}}], 0x7, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xfffffffa}}, './file0\x00'}) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) [ 1781.420747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1781.423138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1781.425841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:50:30 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x20a, 0x0) 07:50:30 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x801c581f, 0x0) 07:50:30 executing program 2: prctl$PR_SET_FPEMU(0xa, 0x1) prctl$PR_SET_FPEMU(0xa, 0x2) prctl$PR_SET_FPEMU(0xa, 0x2) prctl$PR_SET_FPEMU(0xa, 0x3) prctl$PR_SET_FPEMU(0xa, 0x1) 07:50:30 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 25) 07:50:30 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xb0ff2000000000, 0x0) 07:50:30 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x20b, 0x0) 07:50:30 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000001}, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) 07:50:30 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @dev, @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0xfa, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa21aaaaaaaaaabb080503fffd00742d2cc2d945ef5671b17f8421196e334378f8a7109696495d19003b72bb640d2c5cc633ba747d425e91eb827577c71e77c0757901a9462b6828079bd6bffa2ae1f81b022eb25d2cdde31c4b5e8d60e4cc7dc7a662d9d7a05221d36789748691e515ff24ffea363c1bda353795f757721153f7ce47a876ee6e6be5cb2e84674172cb1dfcb66896d5ce6e65f405288115f4c642f02758cc75ea12821e625edafd97d5afe43600c130883707e9deb346241a1e8d54a1ed367bbc59c8cca0af81d81dadf2ea92d04f34aa1ddaac307570e8718c77998775f42c32"], 0x0) 07:50:30 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x80811501, 0x0) 07:50:30 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x20f, 0x0) 07:50:30 executing program 2: ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x200}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x16}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000540)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 07:50:30 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xc0ff2000000000, 0x0) [ 1782.360431] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1782.362241] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:50:40 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 26) 07:50:40 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) signalfd(r0, &(0x7f0000000000)={[0x9]}, 0x8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x8100, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd5, 0x4, 0x0, 0x1, 0x0, 0xffffffffffff7fff, 0x10040, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffff000, 0x1, @perf_config_ext={0x2}, 0x10000, 0x6, 0x2, 0x9, 0x4, 0x7, 0x5, 0x0, 0xae, 0x0, 0x3}, 0xffffffffffffffff, 0xf, r1, 0x8) 07:50:40 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xd0ff2000000000, 0x0) 07:50:40 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0045878, 0x0) 07:50:40 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x2) 07:50:40 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780020", @ANYRESHEX=r1, @ANYRES16, @ANYRES64=0x0], 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x1}, 0x6) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 07:50:40 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:50:40 executing program 6: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x53, 0x7, 0x3, 0x7f, 0x0, 0x4, 0x10c01, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800, 0x2, @perf_config_ext={0x5484, 0x6}, 0x1, 0x2, 0x80000000, 0x0, 0x4e8, 0x7, 0xe00, 0x0, 0x7, 0x0, 0x2}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xa) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x92, 0x9, 0x3f, 0x3, 0x0, 0x1, 0x2000, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000100), 0x9}, 0x4080c, 0x8, 0xffff, 0x5, 0x7, 0x6, 0x7, 0x0, 0x10, 0x0, 0x1}, 0xffffffffffffffff, 0x10, r1, 0x2) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x1f, 0x5, 0x2d, 0x0, 0x3, 0x10828, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4d8, 0x0, @perf_config_ext={0x80000000, 0x9}, 0x600, 0xff, 0x7, 0x0, 0x0, 0xfffffff8, 0x50, 0x0, 0x3f, 0x0, 0xffffffff}, 0xffffffffffffffff, 0xb, r1, 0x3) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) 07:50:41 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) (fail_nth: 27) [ 1791.815606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1791.830637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1791.849509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:50:41 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x3) 07:50:41 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0045878, 0x0) 07:50:41 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xf0ffffffffffff, 0x0) [ 1791.887922] FAULT_INJECTION: forcing a failure. [ 1791.887922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1791.889671] CPU: 0 UID: 0 PID: 16811 Comm: syz-executor.5 Not tainted 6.16.0-rc4-next-20250702 #1 PREEMPT(voluntary) [ 1791.889701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1791.889714] Call Trace: [ 1791.889722] [ 1791.889730] dump_stack_lvl+0xfa/0x120 [ 1791.889760] should_fail_ex+0x4d7/0x5e0 [ 1791.889803] _copy_to_user+0x32/0xd0 [ 1791.889833] simple_read_from_buffer+0xe0/0x180 [ 1791.889867] proc_fail_nth_read+0x189/0x270 [ 1791.889901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1791.889935] ? security_file_permission+0x22/0x90 [ 1791.889963] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1791.889995] vfs_read+0x1eb/0xbe0 [ 1791.890041] ? __pfx_vfs_read+0x10/0x10 [ 1791.890073] ? lock_release+0xc8/0x290 [ 1791.890101] ? __fget_files+0x20d/0x3b0 [ 1791.890142] ksys_read+0x121/0x240 [ 1791.890172] ? __pfx_ksys_read+0x10/0x10 [ 1791.890212] do_syscall_64+0xbf/0x360 [ 1791.890237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.890260] RIP: 0033:0x7f692313e69c [ 1791.890277] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1791.890298] RSP: 002b:00007f6920701170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1791.890320] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f692313e69c [ 1791.890334] RDX: 000000000000000f RSI: 00007f69207011e0 RDI: 0000000000000003 [ 1791.890347] RBP: 00007f69207011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1791.890360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1791.890374] R13: 00007ffc924bcd3f R14: 00007f6920701300 R15: 0000000000022000 [ 1791.890403] [ 1792.639955] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1792.641541] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1792.643327] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1792.645761] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1792.647507] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:50:52 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x100000000000000, 0x0) 07:50:52 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac2814aaffffffff00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) 07:50:52 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x40, 0xfc, 0x7, 0x0, 0x5, 0x60481, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x100, 0x10001}, 0x4000, 0x1, 0xbc, 0x5, 0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x6}, 0x0, 0xa, r0, 0x4) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) 07:50:52 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) 07:50:52 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x4) 07:50:52 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:50:52 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc0189436, 0x0) [ 1803.568717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:50:52 executing program 6: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_io_uring_setup(0x7ef, &(0x7f0000000000)={0x0, 0xa5ba, 0x0, 0x3, 0x2dd}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r3 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x85800a858f9445d3, 0x4010, r3, 0x4618d000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0x6, 0x0, r4) syz_io_uring_submit(r2, 0x0, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x8}, 0xfffffffc) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/163, 0xa3}, {&(0x7f00000003c0)=""/24, 0x18}, {&(0x7f0000000400)=""/183, 0xb7}], 0x3) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_setup(0x54bc, &(0x7f0000000180)={0x0, 0xf3a3, 0x2, 0x1, 0x362}) r6 = syz_io_uring_setup(0x5ba2, &(0x7f0000000540)={0x0, 0x75e8}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18}, 0x0) io_uring_setup(0x4e79, &(0x7f0000000100)={0x0, 0xb1cf, 0x2, 0x3, 0xef, 0x0, r6}) [ 1803.585011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1803.596837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:50:52 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x4, 0x0, 0x0, 0x0) 07:50:52 executing program 2: fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000000)) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaa08000000000000000800450000280000f7ff00f88f6bffffffff00001000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 07:50:52 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x5) 07:50:52 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x200000000000000, 0x0) 07:50:52 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0xc020660b, 0x0) 07:50:52 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x6) 07:50:53 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3003, 0x4, 0x0, 0x0, 0x0) 07:50:53 executing program 2: ioctl$CDROM_GET_CAPABILITY(0xffffffffffffffff, 0x5331) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) syz_emit_ethernet(0x9f, &(0x7f0000002280)={@random="f0556dcc9661", @remote, @val={@val={0x9100, 0x2, 0x1}, {0x8100, 0x7, 0x0, 0x2}}, {@llc={0x4, {@snap={0xff, 0x0, "8c12", "c8dd50", 0x881b, "47392ab97014b3039f8f69814afa1b4aea77d66a77649cd76593eb11c9b1499b0bb1b0d34f09fec8dee47b3221b3affe909229aa6b6cc1a268fd2c5206252d6a4bc45c2e2f542494a0934c17ea3b5a63623cbf28a9aa18fab82a1a46a7c9233dcf8605815ea87a7dd2965f0da447091500a77494440e0a9c792b02011cc5a146"}}}}}, &(0x7f0000002340)={0x0, 0x2, [0x68b, 0xe52, 0x9be, 0xa97]}) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/4096, 0x1000, 0x0, &(0x7f0000000000)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x80) syz_emit_ethernet(0x1043, &(0x7f00000011c0)={@local, @broadcast, @val={@void, {0x8100, 0x5, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0x4, 0x0, 0x1}, {0x800}, {0x6}, {0x20}, {0xe9c, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x9}, {0x9, 0x0, 0x1}], @llc={@snap={0xaa, 0xff, "3be5", "a3c553", 0x1a, "df1a5a5c1d62585f8fabf39b3c67b901ca67d2218fa305f36e013c87513b066afb164f75ef19e0b3429f65194cb37b2e175678be91a75ce6b540f320642bfb1b3876fadf1ef9dcb7f559893cd72f04668388bf9b1e3daf54f487587e99531dbd02549abab12a331921fb861c5a989b51bcf68551234351cce3ae25e89765f51c8af762a4694eab77bb7cbf03a2c16bb32fb056de60b6e7f59aae16ffada558c7af06d73cf2a1a40b7e862148d616acc0e52a082d14bbad864f556bf3c95df97e70c914f68751f1ed7ed53308fdeb48041e5eacd93fb4664a85e289312200f6a6bb9cf846f6285102622f44cf65d80b0c8b99ad39d77d5ec3ea38d4da63f6efbdfec32b0705972315e1c2b61902dc54ec9984fb8dc016f1c3eab0ddbc8d6ff185fd4f3f92f869ad3194888086170f31b57d8342494ab7a990c3cfb82da3d8bbd2cbe490459cd04380683e34cbbedba6cd982beeeeb4c29e15c4aba5f578d51a5154f647c4a5072fb37009668cd3603edb1cffb710ccdaa1b0b3b709085f1770b76c2f2ce2ee1f899768c6d7a5302761df5f2a1e056846885ae05f80674d58f62299d07ed022974dd2f72577bafedffc1eeab94039b8c609df10f3aa88645dc435825d0650d33d2d33fdd95537c07edb5c92f0b46539c14eb22f3c96d21f56dbb194b4c00bcc480674ec0253fe1acb5a7808e3042c72c1eb13a58b4f0a8430a13683aa5e9c2e09aabe3b3d5cc8438b67435ace3481250780e48d2da029747e5e42df9e6c1cbb4d6320c3d53caf94c68ac902a78ea02ff098b5e8ec1c6faa88d9ce7fbabd86f7d5eea78c1718e22590d8722906ca982d5d7308d46a704aaf327885e8f3880c510c222dc1b747e25d31d6e4b92618d768abfa9eb4ac90b8c7d9ca39f16c74a629ad8ee34f18d156bcdb46870ee4eebe894b053fd85be63bd02c429a555a093cfe45fe7eb4699c589751bf79ab586c9c0dd2eb415950a4110e1c9dfe738474f164ecdf2bdb970f0420ffaf812b08af2994240a10e222c2ec9cb69a6554f4941eb3e438092fee4038938b090b62eb9221c1b43ea123020101a473930a7fdf20f7cd16cc6999c7d3262131f186608bd77257db8ff914a73025263d09d80c6fc4bcd317f5febac1359d15bc827ca08b77acd02298e9024c075faf8b6d4666faee85c980f2fae52cbc8147b59564682cf394035599d8df61f27cd8144dd735540ecf30507254cb8b847327041e120ae381482243d00cde9e74d4524fb7d434f9b9114015dc8e273533a7c8f98f48bd33b6bf5ed33d52b30846752e78ad116c9e2a8a8ecdcc6e7d0c26a41777f9dbc54349beff9d5ac22a595e142eb1a21370f21c12a33d855c4ac0dc77714cf8bafe2a9540cc059c93e2e5a06f1b91b71cb058ea9e491ebc72d6bac8f213fe95fa8f73f9fd653c3f1969b0568d918aada2dce0bbb5b80e8635c79abc00e0a0917ec3bf19d8bdd7f6dd5c44503783e56674e466dcabb0850e8dd26adef1a4019a9bc8c0d4fe7d21ca243b509355f4f16e1731619643f5d79784eb564b222b0a0375296b276047b4949885353741b2e8eb180fc6c8229dad14d4163b2a36074058a8a66ad633d7b035ff826bb5f9f18646fdb077003d96866393e21b4d099bdc18b97cc299e901d8cac47b44a4dd30a2c80f027abaad954c7bca69cbea6b0607ead718363757e701d5a0d9ee56d6d790fde1ce4e4f9acb22ca1b7a713bbc4605965c3a89ca84bd9ddb3a09da79a4513c86e92773d1bfed5ae8ecabb33b5d4a6218c5019e1673e94f5d94cebdf6991f5698ea5599aff84363bbf3830509eddf500458fa487cc887a44fe0856babca1d7e9f040237b17dc49d02d2746c4870373366917c939070d0ba95f1b095567ba73f67ee905ddf88e3b62bf9137c8927e0fdfcd102c48258f83379ba87ed57ef95be1582554962f477131e2e60595b5872a46f4ba4e73920fd2da7297b47615073101864186a26a94bccaeefc0b809cab67303e7892723d15f2e6f65e0ea7afd9408227fb46a48636af3d3b0f137c6ec93c506303cf60ebd032e245a2c5c48c28054de1f2b260667a85a56a02b5d617edaf5a207c54f9672dd9b2ea9baef468e0bfdd9cb55f49a0a99992c036f3c82419ee084431ddd332f932bac9cf5f2296ad5f77485642b29a440b5bddaa1f4620d1018315d2d9e57af969d26e54ce21a379f8263754b175a20050d009aa061e31d1715399d2f98787d826130e5b715db6402ee4f17ea6632da8e8c2d6cab78876a793c3af6618a5b44c422cf94aa690a1ab18ea0d8b1bd793b667e69405544ee388f273cd8426e2220cc6df17b72b090df3ed81953b28093e9a50cba7a935a3806510dace125ec69a4cb15f0ea40540dfebb248b34481f6b18a9f6b35bbb2b0ca507987d4cebdccb8f17fe8c58e6287878d57ede16f70518ab6b17033b9656925003d8fc8489015add18de5ad80ce056520421f3527fc68d2df8412f11c407f8e16a24b7568eefdd9be3645ea847131ab2e366ef87bdd88bc87b0ef61668e05e2f71bfce8cbb9b8311a6165697c8f8cb399d0df900ab7d3922d161b9a057889e603d36de9efe159b17bee1480974190634599dff6011005866d86b4edc99f27225c61bb350b600da1b29eb21fb2aa112a7c011278f8f11839ea780155399b357e96ab6e69b212e8601dfb65feeac000f0bb62e2c3f10f3ece7bece4066e7bb21c712a56a95e743f063a43bfd6a0fead6e045b9fc3c3e04754c5af60f0466c97bedfbb8f68df8ca78644c22b13a49131ba2641c1bd2954dd042a3362dedb24181eb1d44ca82fd312516d812417e82f7a606611b3d14efb0aba6a9c6ce1a9016ab0cc607087c7aa297ec5b68a60ffb3f058de98da36cc0d652478eb6154fdf0effae78ea972b7ecb958ef6a0682373b0a3de8350dffab3c2032c6bfcb682f42a76a62e4015bf5042ef16be000a74909d16a95e17013392982034b1ebe5b746f75ba414dde01d3d442feb92840843cfc25d481d3aa0187cdfa51bd1e7c6c2f08cae22bff26f542ee7c1193ccd656235b3ebf76bce2c32b27c4e8b0fe050ff508f1d2621efcc5bd889716f48efb4f77bc31f24b661bc55fc191d7ef0d2a8a8e297544f1d80af5ec699483a6f2a8aba6d70e42d7b9c91a74a7206dee3b563067e374babcaa0f55d41b86e9db094b19f9d4321bfc436977d02911bca22938cd4d9bbfdf8140dfc6201595477bc9ab10e6e9d146731513b509ce6bb41e30fc3623b08e40c2567d98e488c656a461b0ffb785886d52d56018f30967700a5f9dcff790501a6b780d569fc0e9f1b0ac5d5c3624b7c7ac721929485dd70e858ed11cf7b897f81cd156d8f23703303990f932dcb61aa3f0a04659ef5c80dabf9899b70232df1ce08ebc75cb3fff14b31287e8fbabcc54c30b9f31bd26709927af56ebcebd314292d4a6d2a484d940d6d57e9c41956c477c4204fde5b30f049db96cc4de9eee8e63f6ab27255d635466911ced24af53e156144103f704a38f0ba847d246ec55a4ee36237b2d5d073e59442a410078d4302daf6e006512d9f2d6cf0fa995abf0a33652fcc7fc0f2f4bf0620fd9bbeaf9b43b1114a3b6776a5af6dcb9f17d8e98b101f27de341b144a0763954a0c7657aa4929403a6fdc19cf09a07408c13cf944a419f8d8fec056ad4f13e6785ef6200b62c1f495c519a7b449e2d9e065d90e584382cf9e0d371ccacc50fefd0d0e8016690e71812e6675b7c2b9ae5f733bcb0f2229a230e3698b56034c62ac0e21c70c751fe7e67a1eb62c5c48e8aa73b93062f48c4678435ec27ec7928469fe5a027d72402f7dffc3688245f8520f30bc75fad854a43d8d238b1b82cee3da9b0f47360521df822e52faf2062e30d3be5ef917fd08d1993e27316374be1fe7b3d85abcc51d1095ea2f245c83c6e442f49f25b465f1a651b88fc29ce71c20e8765c7ae3c1952284c898dd71e492aec8e03213ffb8c4616f11d5b0b015d9f8850c88bc1706acb1cf29a621f22dbcc79bc844c10275e91e9e7b274bb6809e5213a6045eb908dbb175db8fdb21cfe29fbb5219f419206fbe57961e6d1e70e493e84f03ed758994bd203af3f25daddb14613915f38d3cd0e7ffcabacce0fedec9a9d7ccc2a03c782a31617ae08bfcfc28612514226dc4f5f450e289bed237221dac0dbe36ab29161fdafd20ceabd6b5a453e587d9834a88adbfa16ff76c1b558b7fdb9166b405ddba4333563036150b6953fec801153ef1e83c352e4346242eacbf8e7a244548b6fbec6ba631c4dd6a2cdcd386ec83ea0f8a3bdd38c331cadbafa95b4b639c78854185ade8800b777ee96dd1644460222b4894d99fcd24dbf5608013d5702861fdd4a1e05b0da06b9a571cf4d2e20bfa68e463a5fa1a07876f60d7a35688c3dc6bca24efa9c678227098eb6e660f911e37a73035cd849b27efe03a7a02b538ca31baf9be0dc41d8c3c83aac0398efd95b173f23c4e3ef9c1432521d790c03cb67c0a57dce389d58072e68ae6d11066ba345129f2b727309fe37587584520842fb88bba6a893d08b4100383851b16792df9b42c111aea9afbd5b3b162669e4292bb0adc251627b925cab4febaa7a188dea70d9dacbead338378b87875c5d5763526d7635bec5ba08f0dd92078bfdd18d28e2f3e4a2e25f85762d32b36d5035fc4198d8afe46ba09291ceae065d1453cf11dc3cfa9380402d95b58847c189b4a8202ad76e7d491d4530bc91fdf0ced6d31329613c812be815f8a810af44e8ea8280afece92c9579dcd6bb15576c80aedb583bd82b4b245ae9542580f47e94ad02740bb6fc9133e682dd5b8c06d8d016efc2ca1cbcf6ebed9f784c290337d5095aa46819d985e416cb588dfee6699933526d51b867e27990973d2868d8f448b18416baa2cb9cdd9f6133e9fc7a14d5f40f4ed1021d8d8a8aeec47f853877391a00eeb1aee20037898761037ecc755f4da127abbd496f1f72698ef738cca7d47dd0109d96f188d4aa930abdadd8c9833996c2a77b9ec19be92c3acb9e6deaf6a062ff2692d5f19d9fbaefbb6b9b210594ee771d82efaf6b2d65eb59cc671cc854b19ab60f725d96f190e43af574d7e2eda3c6a3fe2a52b1bb60300ca589a035235242c1e02baf9d69ceb8b675591e1d179b8b345db0756fb21787d150da0da658373f6096a6b35bebd2d7eb02a748c4a6dfb6fd5950f9738195e8e56cb96ddb6626bd1cd8126dc0f29734ea1b66216884bfe8faa2698b365c8db16608245ee5c70a0f0fa0b2f459fbc7a0cbef5f39ed6aa50e99ce0fa3e6900e6f47919c956852971aee7ce2f9df535ea6ff2b98c1671275282de563d5ffd3adc9b310f7d8891aa561dd197b720c777997e79595edbe302125233cb263fbee98da6333223ac1c6252f7e4e1432a2172a3c7303e01f5289800e31f7a484ab3d5d161ad18205052ec09f14dfe4521afd8a013b4576d135464f327490db5d20df292c7bb241c22f4640014ce9acf01ccaac3dc204317771c25c3546b6930dff22dffbfb79d2b95419592463d4421c15f253e635e7adee61756a037c6b2a26f38971886022c4310d7cc6fa9e6bd6aa16c8c2528ad35d8834be79401e59693e55e6eb4f5599604f1beb156fc5e3df0ef5033348d6bd74b50db12f45e73afbd75f435fed31c05de3d6ffdeb0c5965f438a797d69eb4e7a6cbc482561279b63ded76ecb9adff2637ddab1b6dd32077b47ecbb2c3bb8a98a811bdb78072a350bf502a3a4a1f0c089ee9f4256dbc7fed99"}}}}}}, &(0x7f0000002240)={0x0, 0x2, [0xef3, 0x5c7, 0x534, 0xe16]}) r0 = syz_open_dev$vcsa(&(0x7f0000000080), 0x4, 0x100) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000001140)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x2, 0x5eb, 0x8, @private0, @empty, 0x40, 0x10, 0x5, 0x1f}}) [ 1804.444948] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:51:03 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x300000000000000, 0x0) 07:51:03 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000100)=0xf61d, 0x4) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x40, 0x6}}, './file0\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400102, 0x88, 0x4}, 0x18) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x400, 0xa0000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0x100}}, './file0\x00'}) ioctl$HCIINQUIRY(r2, 0x400448dd, 0x0) 07:51:03 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) setpgid(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac2814aaffffffff00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50180e58735912e4d501385700009078001e1b1b7e2f02d6ce9aba0171ed1b556abb59eaac39d08f3296041b0e96ecfa739fd6ea2804485b8db42f1a4cad3398b1b9767fb96cfdbda2e0f927f211502c00"/97], 0x0) 07:51:03 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x7) 07:51:03 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="30b619d48548867a081ec2ed880c686b2fee530b54b69bc894c2394f0b48567943e619bb3753ab149ea31a7c88bdc5011c3e76a849281416b8bb1d54f5894cb18fc1788b7b90277785a836d546ce9a05981dd6c7a4ee578da4765ae7219b1b2e602726a1976b403d7feb57e3c72118af5b7cadb0deaf6a069373cebb5e4c113aa8aaf3cf9bf16683d661f9f081b5f338566c1b011c47bdee03e1ce5dbac9391ea06cc2326a5c2bf1f125ccc2eb922a8b6b33da62f47a4f6883d89b7b586602391ce17b9d567a23012e912085ba11278722dd4ec2c716ae5cd88317b718dde7a9892542c43986cdc489ad8814c4a922ee0dd1cec042398b3c5b587e6c6d9c748253594cbbaa26861ee41de2bcc48ca2247e006deffc8fda87ee1a381df52e267f1367e871c6098182fd0780c75a471fd6b139d729b0eab8538e6c3619a4ae23513e9d17719f2ce7cfcce7abff61aac656c68cdef06928e62e7baf45fdf492cb8419a4ff239b70e352f2e5b09b4bbd521d6d586fc8bff2e46e66a77377d309489e4f4b791622fbb704ff6a18ffdfcd9166086a54a9eaee49c74d9713f3843142ef314b665571b3a8400ca93139d0d6cb839a1b0b46efa13f5dac91e014fb5727862e5284b61dcf73217ee2ed5c8d32765ae2a23e90fb6cf778be6ebe561a583b9bb6932d61143baf2f1864dc2350bdfe61587599de3d4a2bb6c501d3e4cc2017b106499e10dee2515bcc540d7665b15972925f10f27067dd599e847fddd257609db34d23857946b92cf29a4b8dbfd16c301663de9adb6ed8405a8685ad3e847cea97328f40efb8788de95cb71adcabe40631e9e82d30d048ec586bc4af2348d8f70ddf606339f0a3ef4d3e9ccd0a5dfdfb726daf53da373877142b35bce3a13695048614a61b6a0782128123fb35990b64dcc5f4c33f361270c01cbf0e892c7f212881f6d03a1165cf70846c59c21e36db0d08120a43c8414db6669053d4ec052baac1bca2b130dfbf490475a73514068202db02636588d607954d9e4ba99e6d1f05d672d98261f0cddab85e3f0b0d909108d29549a9d22ab310e6c296ec89db9ecd1aa7033b683c1cdb92c4be76f6ac82e4e0ab938b2e"}, 0x354) 07:51:03 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3004, 0x4, 0x0, 0x0, 0x0) 07:51:03 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x3ff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) 07:51:03 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000003c0)={0x0, 0x7bf8ef84}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xfa, 0x1, 0x1f, 0x20, 0x0, 0x401, 0x114e, 0x9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext={0x8, 0x100}, 0x4, 0x6, 0x7, 0x1, 0x4, 0x6, 0x91, 0x0, 0xfffffffa}, 0xffffffffffffffff, 0xa, r0, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d2, 0x0) [ 1814.669809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1814.674736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:51:03 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x400000000000000, 0x0) [ 1814.686687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:51:03 executing program 2: prctl$PR_GET_NO_NEW_PRIVS(0x27) r0 = syz_io_uring_setup(0x130a, &(0x7f0000001480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000001500), &(0x7f0000001540)) prctl$PR_GET_NO_NEW_PRIVS(0x27) prctl$PR_GET_NO_NEW_PRIVS(0x27) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x9c}}}}}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000140)) 07:51:03 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3005, 0x4, 0x0, 0x0, 0x0) 07:51:03 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x8) 07:51:03 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa7dd38d84793f27bcd9d9b0c0dcbb2a113652a51e4be1ea0270713013ffb740f42689490c1cce258eaaaaaaaaaaaaaaaaaa809300450000280000000000069078", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 07:51:03 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x500000000000000, 0x0) 07:51:04 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000280000000000069078ac2814aaffffffff00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800008b529f990176268bf960c5b4504b3cafe566d8b2e13a5af8a132734d700e074cd4f136f1efada8e339d8a387b2dea94a2f00656276bffce9214486970eac251a3da066aa464a9f3d5922c036831b67fa63e2736832da1bcdbfb0ec2b56df0ade23fa0873b4ba3c7dd7"], 0x0) syz_emit_ethernet(0x94, &(0x7f00000000c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @multicast, @void, {@mpls_uc={0x8847, {[{0x9, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x9}, {}], @generic="f4a11de881de41f3d06dbd04d8be0526c54d49311fdc2605d981ba4ebbd736d4e00f4dad23e940b7920440d511f7e3b82036c55e1a5fba71f91f7bdbd43a0916d3f0807c92ec2f5ca0b933bff4f0b27c8ad024f840aa3aa1ba8ac2208161682b190d9011730b020a1115a187b926ddcc1c493c6f67ea"}}}}, 0x0) syz_emit_ethernet(0x196, &(0x7f0000000180)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x9100, 0x5, 0x1}, {0x8100, 0x2, 0x1, 0x3}}, {@mpls_uc={0x8847, {[{0x7, 0x0, 0x1}, {0x7ff}, {0x8, 0x0, 0x1}, {0x5}, {0x8, 0x0, 0x1}], @ipv6=@udp={0x6, 0x6, "67a0a1", 0x144, 0x11, 0x0, @private0, @loopback, {[@dstopts={0x4, 0x1a, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x4}, @generic={0x6, 0x7, "916868945e8ef4"}, @generic={0x20, 0x9b, "6b273d340abe2cc9f395a23a7f8e4f462cdd413f99ddd5d77be4ab41a910e74c9d180a1107f2fbe3549fed528ccd97af6b3b698dbfacfbb1e3290ff05b5ffcf2df3cb89d87cf3930e4dc309f7fd04733768d8df804f3af5b109a2b2d6e05ad84cdfec756b69d2897c165bb6b252cde7a101a45c7b56dfeadca09cf0862b5a62e0d4ec02b2c92d555d213789c5a36e2bb75e241cdbacf4402de032d"}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @empty}]}], {0x4e24, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x0, "2333a6b2eee9bec982079c61041f2562521745558bd335c8ee9328566f49daed", "218cb7dad8051e6c20893ecc36102791", {"e3b7ac04d51ce0e66a85ef2abe67af2b", "8f7cf37d944847617e78f4c48e13166c"}}}}}}}}}, &(0x7f0000000340)={0x0, 0x4, [0xbfb, 0xade, 0x215, 0x933]}) 07:51:04 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000004500)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004380)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000600)=[{&(0x7f0000000100)=""/102, 0x66}, {&(0x7f0000000180)=""/24, 0x18}, {&(0x7f00000001c0)=""/209, 0xd1}, {&(0x7f00000003c0)=""/220, 0xdc}, {&(0x7f00000004c0)=""/236, 0xec}, {&(0x7f00000002c0)=""/13, 0xd}, {&(0x7f0000000300)=""/31, 0x1f}, {&(0x7f00000005c0)=""/14, 0xe}], 0x8, &(0x7f0000000680)}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001700)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f00000017c0)=@abs, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001840)=""/152, 0x98}, {&(0x7f0000001900)}, {&(0x7f0000001940)}, {&(0x7f0000001980)=""/87, 0x57}], 0x4}}, {{&(0x7f0000001a40), 0x6e, &(0x7f0000002c40)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/23, 0x17}, {&(0x7f0000002b00)}, {&(0x7f0000002b40)=""/60, 0x3c}, {&(0x7f0000002b80)=""/147, 0x93}], 0x5, &(0x7f0000002cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000002d80)=@abs, 0x6e, &(0x7f0000003000)=[{&(0x7f0000002e00)=""/111, 0x6f}, {&(0x7f0000002e80)=""/208, 0xd0}, {&(0x7f0000002f80)=""/57, 0x39}, {&(0x7f0000002fc0)=""/2, 0x2}], 0x4, &(0x7f0000003040)}}, {{&(0x7f0000003080), 0x6e, &(0x7f0000004300)=[{&(0x7f0000003100)=""/87, 0x57}, {&(0x7f0000003180)=""/107, 0x6b}, {&(0x7f0000003200)=""/243, 0xf3}, {&(0x7f0000003300)=""/4096, 0x1000}], 0x4, &(0x7f0000004340)}}], 0x6, 0x10041, &(0x7f0000004540)={r1, r2+60000000}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3a, 0x3f, 0xdc, 0x5, 0x0, 0x3, 0x8081, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x1, 0x1f3}, 0x11129, 0x800, 0xfff, 0x5, 0x8f, 0x1ff, 0x7, 0x0, 0x401, 0x0, 0x401}, r3, 0x8, r4, 0xb) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:51:04 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x600000000000000, 0x0) 07:51:04 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5411}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) [ 1815.490789] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1815.492901] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1815.630484] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1815.631715] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1815.635914] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1815.640265] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:51:14 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf8, 0xfd, 0x63, 0x8, 0x0, 0x7fff, 0x24000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffffffffffff7fff}, 0x0, 0x0, 0x81, 0x3, 0xc02, 0x9, 0xf763}, 0x0, 0x6, 0xffffffffffffffff, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) 07:51:14 executing program 3: fcntl$addseals(0xffffffffffffffff, 0x409, 0x6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r1, 0xc0603d0f, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x80, 0x1, 0xba, 0x34, 0x0, 0x1, 0x4040, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7f, 0x0, @perf_config_ext={0x7fff, 0x6}, 0x80, 0x2, 0xc33b, 0x0, 0x7ff, 0x6, 0x4, 0x0, 0x8, 0x0, 0x79}, 0x0, 0x5, r1, 0xb) 07:51:14 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x28) 07:51:14 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="30b619d48548867a081ec2ed880c686b2fee530b54b69bc894c2394f0b48567943e619bb3753ab149ea31a7c88bdc5011c3e76a849281416b8bb1d54f5894cb18fc1788b7b90277785a836d546ce9a05981dd6c7a4ee578da4765ae7219b1b2e602726a1976b403d7feb57e3c72118af5b7cadb0deaf6a069373cebb5e4c113aa8aaf3cf9bf16683d661f9f081b5f338566c1b011c47bdee03e1ce5dbac9391ea06cc2326a5c2bf1f125ccc2eb922a8b6b33da62f47a4f6883d89b7b586602391ce17b9d567a23012e912085ba11278722dd4ec2c716ae5cd88317b718dde7a9892542c43986cdc489ad8814c4a922ee0dd1cec042398b3c5b587e6c6d9c748253594cbbaa26861ee41de2bcc48ca2247e006deffc8fda87ee1a381df52e267f1367e871c6098182fd0780c75a471fd6b139d729b0eab8538e6c3619a4ae23513e9d17719f2ce7cfcce7abff61aac656c68cdef06928e62e7baf45fdf492cb8419a4ff239b70e352f2e5b09b4bbd521d6d586fc8bff2e46e66a77377d309489e4f4b791622fbb704ff6a18ffdfcd9166086a54a9eaee49c74d9713f3843142ef314b665571b3a8400ca93139d0d6cb839a1b0b46efa13f5dac91e014fb5727862e5284b61dcf73217ee2ed5c8d32765ae2a23e90fb6cf778be6ebe561a583b9bb6932d61143baf2f1864dc2350bdfe61587599de3d4a2bb6c501d3e4cc2017b106499e10dee2515bcc540d7665b15972925f10f27067dd599e847fddd257609db34d23857946b92cf29a4b8dbfd16c301663de9adb6ed8405a8685ad3e847cea97328f40efb8788de95cb71adcabe40631e9e82d30d048ec586bc4af2348d8f70ddf606339f0a3ef4d3e9ccd0a5dfdfb726daf53da373877142b35bce3a13695048614a61b6a0782128123fb35990b64dcc5f4c33f361270c01cbf0e892c7f212881f6d03a1165cf70846c59c21e36db0d08120a43c8414db6669053d4ec052baac1bca2b130dfbf490475a73514068202db02636588d607954d9e4ba99e6d1f05d672d98261f0cddab85e3f0b0d909108d29549a9d22ab310e6c296ec89db9ecd1aa7033b683c1cdb92c4be76f6ac82e4e0ab938b2e"}, 0x354) 07:51:14 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x1, 0x4, 0x5, 0x7, 0x0, 0x100000000, 0x24301, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x562e, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x80, 0x4, 0x821d, 0x0, 0xa36, 0x2, 0x9, 0x0, 0x1}, 0x0, 0xe, r1, 0x0) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:51:14 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) recvfrom(r0, &(0x7f0000000000)=""/160, 0xa0, 0x100, 0x0, 0x0) 07:51:14 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x700000000000000, 0x0) 07:51:14 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3006, 0x4, 0x0, 0x0, 0x0) [ 1825.651705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1825.665843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1825.681266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:51:14 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0xfffffffffffff000, 0x0) 07:51:14 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = getpid() r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0x19, 0x1, 0x9, 0x0, 0x3, 0x808, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9df2, 0xaf38377fd2139297, @perf_config_ext={0x2, 0xfffffffffffffffb}, 0x10000, 0xffffffff, 0x2, 0x2, 0x5, 0x2, 0x81, 0x0, 0xfffffff7, 0x0, 0x5}, r1, 0x1, r2, 0x8) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) 07:51:14 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x300) 07:51:14 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3007, 0x4, 0x0, 0x0, 0x0) 07:51:14 executing program 1: ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000140)) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='[[\x00', r0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d2, 0x0) 07:51:15 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 07:51:15 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x500) 07:51:15 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x0, 0x0) [ 1826.462852] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1826.516546] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1826.517903] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:51:25 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x0, 0x0, 0x0) 07:51:25 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x20001, 0x0) sync_file_range(r0, 0x1a5, 0x3f, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/242, 0xf2, 0x2) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r2, 0xc0603d0f, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x7, 0x40, 0x5, 0x0, 0x7, 0x449, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x1, @perf_config_ext={0xffffffff822eeac0, 0x7fffffff}, 0x20, 0x81, 0x4, 0x9, 0x3, 0x1, 0x3, 0x0, 0x80000002, 0x0, 0x5}, 0xffffffffffffffff, 0x9, r2, 0x3) 07:51:25 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_emit_ethernet(0xf1, &(0x7f0000000000)={@multicast, @broadcast, @void, {@x25={0x805, {0x2, 0x0, 0x32313bbefc7464c0, "32b340ff0d9938bb0dc2ff39419fd2a833bf519a132bb28f114d2a5480f9483d9925015d953805ad0d84cf30c1d2449b0a241c3ac86c34b41afb21a26d8f6932f27057261bb6ac3a95802c197af25c05b1731fb3265d624a9cd14cd95742f78ac8b2de0dd5de71f9542338cefba606d99174500b826e3b47abf9a03bf1bf43346b77ffec9fc0746ec2908d28dfbb805dce4c1f17ab458ed44085fb175561c4d9522172318f61648e2ae87583e3f2825e84b6fe9033b5a16c81d305a70ac37426412dc6df1e7bc00de32da0d1a949af6e9037291099f8dedfb22743e74bde3790"}}}}, 0x0) 07:51:25 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x347980, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6, 0x6, 0x3, 0x9, 0x0, 0x6747038f, 0x300, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x40000, 0x4, 0x8001, 0x7, 0x2, 0x97, 0x3ff, 0x0, 0x9, 0x0, 0x5}, 0xffffffffffffffff, 0xa, r1, 0xb) 07:51:25 executing program 1: r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@multicast1, @in=@loopback, 0x4e20, 0xed04, 0x4e22, 0x20, 0x0, 0x0, 0x1c0, 0x16}, {0x6, 0xfff, 0x8, 0x3, 0x80000000, 0xffff, 0x6}, {0x4, 0x1, 0xfe56, 0xfffffffffffffffd}, 0x400, 0x0, 0x2, 0x1, 0x3, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x32}, 0x2, @in=@remote, 0x3506, 0x1, 0x3, 0x45, 0x9c1, 0x9, 0x20}}, 0xe8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d2, 0x0) 07:51:25 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x600) 07:51:25 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x354) 07:51:25 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) [ 1836.202597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:51:25 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x700) 07:51:25 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x4) [ 1836.284965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:51:25 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:51:25 executing program 6: setpriority(0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x76, 0x0, 0x6, 0x8, 0x0, 0x3e, 0xb0000, 0x7ae0f92de0356901, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x45e88, 0xffffffff, 0x1, 0x6, 0xffffffff, 0xe5, 0x0, 0x0, 0x7fff, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0xa) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x4}, 0x6) 07:51:25 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x0, 0x0, 0x0) [ 1837.091680] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1837.092966] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1839.025172] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1839.029587] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1839.033453] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1839.040384] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1839.044250] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1841.061173] Bluetooth: hci7: command tx timeout [ 1843.109205] Bluetooth: hci7: command tx timeout [ 1845.157092] Bluetooth: hci7: command tx timeout [ 1847.205128] Bluetooth: hci7: command tx timeout [ 1855.271908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1855.273143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1855.337334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1855.338777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1855.642617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1855.647413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1855.651893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1858.920092] Bluetooth: hci1: command 0x0406 tx timeout 07:51:55 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf}}, @random="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"}, 0x354) 07:51:55 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x5) 07:51:55 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xe0, 0x5, 0x4a, 0x20, 0x0, 0x3f, 0x4084, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext={0x3, 0x9}, 0x0, 0x3, 0x8, 0x0, 0x6, 0x5, 0xfff, 0x0, 0x22, 0x0, 0x8cdd}, 0x0, 0x6, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x22) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) 07:51:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x2800) 07:51:55 executing program 6: perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) 07:51:55 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd, 0x0, 0x0, 0x0) 07:51:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x2, 0x3, "b8c98e", 0x3f, 0x9}) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:51:55 executing program 2: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d80)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@loopback}}, &(0x7f0000000e80)=0xe8) r2 = syz_open_dev$vcsn(&(0x7f0000000240), 0xffffffffffffff27, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x28, &(0x7f0000000000)=0x9, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000002840)={{{@in=@loopback, @in=@local}}, {{@in=@multicast1}, 0x0, @in6=@private1}}, &(0x7f00000002c0)=0xe8) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x2a00, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000800)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000a80)={&(0x7f0000000380), 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x1b4, r6, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r8 = accept4(0xffffffffffffffff, &(0x7f0000000b00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b80)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000010c0)={'batadv0\x00', 0x0}) recvmsg(r8, 0x0, 0x40000000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x34e5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000003980)={0x124, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000014}, 0x5) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x400, @remote, 0x38ea}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="7654234d1f8f842660edeca3a5607d9d13e6c25d35e6cc0a72ef7b90c2d460b9e885bdfc5d185caa3719546d10d69640d0fc1fbbfd1f8f7ccd0389ce936067c895177e1b5177a86e2d894a42286318ba021822ec1e7b33f44018daee3c5cd068f0b7bf0d0290", 0x66}], 0x1, &(0x7f00000024c0)=ANY=[@ANYBLOB="d00000000000000029000000370000002f1600000000000001ac31abe78624b2f8d9b04218982917439d8208c380f204a2ccf8e1895d7ea05ae6ed5b72e29b9165c5963bd1dc41b050f9ecb7fd4209e4df9c1b5bc0ac5106ba8081f1b14becc7e8433ab38b60f15e6e9b929c9d9c620bee0cbed40469c8a3783033a5c488c44f6ba33ed17c4b24cc1e0836edaa45db1e5ef36c03427eda95458a487453258d142e444cafb91334499a3a639dc6817ba37505f9a012d8bfe9a8a1ccc60f19ae1d90b2e87a47dd050200010000000000001400000000000000290000000b0000000000818f00000000c00000000000000029000000370000002114000000000000c204fffff3d30888dc2d9822d55816b85cf14a51a2ecdae4555415a8cb4f43776d18c4718e6619378375617e757486f0ced4d550ad46847a22ba9858edc4b1c298c62ddd081c88d1033dd0ed8e5adc5b930b861df410a2bceadd554f3f9e45bbe1a0752b2399cc6848c10d8bb9e8ce09cd824789e16d3dc380b0452c8b96bc96b16b943b26f780de500b6135abd4c7dc0106000000000000000100c2040000000500010000000000400000000000000029000000370000005e040000000000000001000103000000c2040000000105021be5c910fc000000000000000000000000000001000000000000000029000000360000003b1d0000000000000103000000c204000000020107000000000000000728000000000808fd5a001000000000000002000000000000007f0000000000000002000000000000000740000000030e070200fe0000000000000019020000000000000500000000000000000001000000060000000000000000000400000000000000000100000000000004010104017f07580000000214070892b1e2d800000000000104000000000000030000000000000003000000000000000200000000000000000000000100000002000000000000000101000000000000000c0000000000000200000000000000040103c2040000009800000000000000177f0f1dd2f03042a31cf3187deb1118df3e87c53677a41f391d1c9a01c1ded09622cb9fb640dfc4efbf9c10202bea767ba08619cf960e1f8a22a6ddbaf60915d52578a77d67f26fb043a1bf385f41329872cd5b967ff793fcf80c9df1e8160f0c18556ca90e479be6b0da74caac7609473100000000"], 0x2f0}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="f6d09a812569f121c88b2725840dbcaac0f35a5c81416dd2df070303043ae6edecdf06815f0f3e45ac32a64e84bdd8101c1769fa25736a26c58972e54fee74d05d8f96108ea0175abd7787c2db19a73b871efc54fdcf3e796a5b413989915cc6fd4d72c2cc7f4ac70f29106b686741fc30a650012f28aca3d6", 0x79}, {&(0x7f0000000500)="a9902a97723b5f2ad92960c3f24fe8bfbf97a5b487cfddeed6cfc29bec7d95c5adb5b27a264a3129cd2180c3c7b672a93b9908170a7df53189b976059ea92e6363a41208d58b3b", 0x47}, {&(0x7f0000000580)="de", 0x1}, {&(0x7f00000005c0)="1d0d052f1829cdec4b2e69d3ed6784f022eb3496b89b5dfa76a398f27c241ac749ca8ddabe1ac4d11f1d8d1ba08123a81f35aa63a7aad9f77cfb86221c5c350b7d26979f71c969c5a570d2d3b0759cea46c07e71d16e6d58ba883a8a5df5a3e344d3f09294c34980eb8c9e531fe0019610fc9dc35b1dccfeb7df25480d368f0d4a7f7009d742da2b12dd9a6f0e551e3d28ccef66af64d2388a918f24c7bf57ba67a26f356523a26769e47f0967fc7b590a014a98fafce88a70dd7dfa7a537a2a4e45253e1dddecd27906557ce896", 0xce}, {&(0x7f00000006c0)="654b9f5e175fd4122cab5d87d1f05e1ee3e7bf279ffb8aa714e1f8930d712730cc2c63c5449e6835ecaa87ca535d96e81b4f2999024333475bc25449e8c9da2fc146b774692d257d8fa8", 0x4a}, {&(0x7f0000000740)="6f356f9351ff03ef983c2d5dc0bdf3b11b208dddd904d364500cb237c7ccaa3101687b115f39f1552337319f33e62b143942efab709cd2e1ad71f0237d3cd56409eda44128", 0x45}, {&(0x7f00000007c0)="1c4f80fd831c1b4812d54d4939f49f0af21cbc6440459272ab2198a8540526e68103134c956946953e5426747cb382ce1375ac38478b90d6e04662acd9ac1170572c950bd2fcf6a7c65bbe6bdd55235203", 0x51}, {&(0x7f0000000840)="f3bd4e132e21a78fbf22a8161352849551e72140dced0f9e34990f7b6d82e207a66dd7a50dc893267ef2dbe5355b280ffce9d6f12d3197a874438625ec6e4d74932cbfa236829299346e60f6eaef696414572ba1b779de92ab79c00b3da25d208423173c37b19aef58eb6bfc390b14535f6a2b59c305fb1c4903792a39c966fb7f4081bb688dc9c876e21cdde1463d3cf03ed248da2fccdfb57242c6e05ecfb0a011a265e2564ff5db88c59fcef9a05af76ba35a552cd9d8d8e16edb4b93f318f0004136105ba0db", 0xc8}], 0x8, &(0x7f00000009c0)}}, {{&(0x7f0000000a00)={0xa, 0x4e23, 0xf63, @loopback, 0x7f}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000a40)="13ee7deb94b8e67f0bf7002dc12706e01eaa1a7ec812b5d09630f2998a0b2eaefe72196cd2ee35881c129e50aa3e1e45521a3f7415cb31aade5e1eb04d276d80a70cdceaa67f607c76b5c2f5e23694838c2e56ad1ebfedb833c3a92eac94d407deda67288d5552cc7dfb283afc4184dd312e6a48805bcce75f8faaa6cb06bf04d1c957addeb6a8b39d6db9580d8217e58fb603cbd04c37bfb1e63c1bb7e1e8e3dc70a275b4e1de47f4124ef2e2995af52c3c27ba451732e8c3bb912fdfc3", 0xbe}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e20, 0x101, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000b80)="d7dcd1071879f1b3d6e3b25c569d3979dff75c60708e4901162912c81f96dbb77dfd51d3360f9c31809a", 0x2a}, {&(0x7f0000000bc0)="9167eb5ae6d02b5d85dc64bbe15c0a1a65682fb49cfc37ce490f38ecb279046fd85468a39e7c0b898e5375cdaf854a7243e7724b7800c0772818c71425f45c04749be93429dbef6053b7a708078ca33b45e26e2f9d9eaedab4cbbfb5296b6f896a00b25d012c6bd1761e4689cc0f575ca4d043ffda457e9a05f11dcf80cf8793dba4f49ee144c42fc1bd4f217512c720a0a895d86a9c3827f95b33a988d8694d4f8a5d2663968fe301557274b4b5847575338f638c3212aaaf7b4740ef5d", 0xbe}, {&(0x7f0000000c80)="55f694c95ab12857493fb61d26321dda017081184c2cfeda9fe8b216bd73188be1092d50060ad07e7571f4579f1aea2066af5cfbd53ea6aecb3a3fe872ecf7eb769129bfc3323206c03c432200a9560e87437320869e25fddfd3cf5e3bb236f43d4111227847cbc16100382de889600fb37960b202591dc3d8d2569465a015c987f26efb78debe76c2877adba295187f32afd8b2156fa747d2c39f08344dca412601194a1c66c18f8461efa7c3f57ab819ff25766efe5907fe3b59281c", 0xbd}], 0x3, &(0x7f0000000ec0)=[@rthdr={{0xb8, 0x29, 0x39, {0x3c, 0x14, 0x0, 0x5, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @loopback, @private1, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2e}, @empty, @empty, @private2, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @dstopts={{0x60, 0x29, 0x37, {0x2c, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0x200}, @generic={0x6, 0x36, "9950cfee327455006ebe7ad0c6bbebafc66983424a81b3441692eb83b61b55d8978ef6d11851b042067edf9e45bd5aed99c5263e8d41"}, @ra={0x5, 0x2, 0x8}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r1}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x67, 0xc, 0x0, 0x83, 0x0, [@dev={0xfe, 0x80, '\x00', 0x36}, @private0, @mcast1, @empty, @remote, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @rthdrdstopts={{0x150, 0x29, 0x37, {0x84, 0x26, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @generic={0x7, 0xbc, "9da281f88dad7ccceade728ffc7dec349c5e00c7836293c4f5704936914aea9176dc6a2c3dfb36453b9087a73ae02453d362def16fc4d467b962c240f0fed5b36963f95d9a037d579e7df44b56953d523f034c6fb85e93655ba7722904f45d600704b0a5f926202c5cbf3796d45dc998fbc3be0b16d36a42d8a8587fc4e05e9522105fa9bc40213a1d39c7c0f6e6d37a1f1e9560cad020d77e531ac10f05399b483a506d15a32d4fe24d70ab1bbdde264ce09212268997f8e0f5f48a"}, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x5}, @pad1, @calipso={0x7, 0x48, {0x0, 0x10, 0x31, 0x4, [0x100000001, 0x50e3, 0x5, 0x880a, 0x1, 0x80000001, 0x100000000, 0x3]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0x1120, 0x29, 0x37, {0x5c, 0x220, '\x00', [@pad1, @generic={0x0, 0x14, "3dbe3e45ea0d9f970662b5c3fac3438c4c12730f"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x21}}, @calipso={0x7, 0x50, {0x3, 0x12, 0x2, 0x4d1, [0x7f, 0xffffffffffffffc1, 0xffff, 0x1, 0xffffffffffffffc1, 0x8, 0x2, 0xfffffffffffff700, 0xbef]}}, @generic={0x80, 0x1000, "489523ae3345e08a138fd70ceb8cba494b9148f4d102d760abf8c2137c6a2ad12bf987be73b83e208ad9bf588025dfdc4e05ab30fd0a48bfd967e6126a498bc6187b1c2cdfd7a9d59fb1acda04b9b87520346845604f91b94197d6efc00597772c624809714cef4e74be2af264a69f14e15844c06831b2b69f90fb5dac25406105936426a71d0a214ab5eb283c19a6cc14b83e8112e30681547c3cbdd5b678da88601bffc32b19e6880c4e7af82de32050906b21ff40961f9d63d261be91865a3b7f531fda787049653a2dbbb0260c1ac69a9cabd0f000e16529b5f24a3208b37455f99256e1f9ce2d24809cc3566b15f2b63a45ff2cf06c7d95b6986eef16704b65efa604ee7af42f1cc457cf1e5477cdb2f91c0ccd495de2b10ccb584122f79b8b94946389616ac507a0343d805e883232fd38646dde5f4ce699f7ef5583a97549c96a3b14deb202b20f3f922e2ae95b3a8b7cd69c18cb0fbdeb739bfba08cef4052fda52a20b290c0eaf1b1d00bd112749c987786f01d9e570b9b9d80637d3a2e38d7d28fbb4aae8086efe7047f41ad6bb75021b654388ada38f19d9ba7efb1a3fe393a3495a7862beb92124564fa844c150d0279d9b0d2ed2f39ab68dba7fffdacb3256f15ed9a894480aa0181fbdc3796b06c878a414a04371fc7f3a8549d353a974b8c567fb5c6793479a4b6790ea56a36519426e3dbccbc86ff791a65d836428657733caf42cc0494eb574ff8ade955b84585e3a1b83e991c94c9275272f78a5c6f71668734616d43561e81dc922d1af22b9ef2907a1894655567e19fe60d06ec2d9aa539855dad4d2c3b4d15363d5b48205cdc411398413d953549727f7fe8bfc1b6262b5be7cad6005544ec1e383423007c8bccaa53d3665bdca236ca9a321051b6a77af75daf8cc07d5cb183e65e36e21b4f95b19593f13972ca97bcca979628cb8cf4ea37b53cab5511c8231ae85e89ccedd73f5c1bab98aabd905ccd56865af1c74d6ffddf93df4b7cbdff44be15e4d726b57e95e7f0a6eb62878e405e3dcd76a8d4f6362d73396dbfbd0ddbb74c7a510daafbf2844eebf27e3eda29a52d616a7bafef2a47b5b3e29a6bf5445842c7ed93d912142dc32571b18a7701083031b5cf49dbe5f94943a0e4eeed0fa35b4d6f53ccb1e953b8755fd1f6318cc071d3246c1fb5fbb458bcc17cd456215206191d0622ce3bf51b3c42ab997b26e360379b500b5ed8ef115beaac1725789bf48d0a1408dd67b32218224de077b2cd97ad62e750d34a8711e7b964d469c8d3977d2f16f36190559ee14326d1fa4c509a4bc0cd5247c0d42520635c26d148466d3240969cb1d5aa50384be2010876188e89aa7e7e972a4dcd7ca37bcf05f965cd0d4b0f65a57a987d1343c9b7eb381b91a49f21d5350485cef5252d10f246907ff322ae33af2e27ca0fe15c71600b15f18010f993d6e784979450ec028bef37a7a63b1b4e9c1f63f31d8f899969a2f77db1dddb2d625795d8c4a76d8dc20db174b7bcf6194e1205c03debf5812427a6eee7a3ef08922a1ecd5c2cd8df9b9bc31106fa0748ec7181b3d2d627540a98a7aa7a55cd49eed3cfe0738c3a5982d1df28e61a3c0949f7f584da833c1f0eb0d50b65f492486a4baa0a4099ffdf0e92a4f836a0f3626868b0dd78c9584be16fb5003122689b500fde81da2f595d0f569471f62702e1ea89fd6a5a69d6dba5ba080823596cf1837babaaa67d3801393d9a190b147729d16b90a9aa1ed9466a3809b684b4c506c3540758fa70f54c9e4a6ffdacf335d36ac8f5be41bfbdeada89dcb94a8016996a646bd22020a9808c486a9fbe6de839f0f2931c4151e149cfe17691996e898a4b7bb2433e9a4d89dd27b8db55d89259c349473bc3272efccd214a7fea6090ed4f7b863f2efca8035ddb73213ff44eebfb17790abfda6bb20941c9257c81a9f772342635956c421d9963db6f970d2fdf5d1c96f5522417b25a8a0110deb56318ef43413824be71292eb10b227ab8c04432be0320691290306cce03781da3c0a95d1dc16c9ef59dae6c3476ce1e384537d6462b1ac486c9d583f2b7cb0d473360b9da9a58540780fb5340af951338614a59369ec4cdf35eafb306d5487cf2654b74587c78620ef2430e3dcf87e69aa8279618f3e99c2141f098eee4babe79457c943fee15219de68e3221f60ffae11cc76e15b5a41e0322b2f7a5d7f44a3ceb80633ec00fbfbd21e64335af83dca8d42e05e3f9c687075138c1f9b95c7b77adc85e48183d61f13720425ea13ea19993401b764696208b6e090e72cdf432398824d27fae0d5aacddf6a140e8706097cf4516d62744c41f05abbf90e18d4c733b9136f3f45b9dbfb2dac00bfeb9ccd4ceb12bf4047e241a409551d5a0f2c56ac1536e508b5f4d42f22ccc2fe0097224ebad1adfd09343c649a84713def023eb81340ba6279ea7ffdf4ba6631b9de64a507d58ae5e75db90268fab294c1489a680cb950440de5eccd36c4158ff0be86f55ceb32436f541bb59d4b3c33e01aa4f35f936749ace18f57e51462d60dbe2c15a300591a9487ef7788b493b291a6866d3a0431abf5b2156045bef91bee208c166bcecf4e76a2d99038b1e4dec3338a2ae98830c3cf4367c53ef8331f66650b04a189053065afc1edb11aa1f17ebbfb732fea4874966b6ca0cfb5279128b611b727817659cf05f3cf6add817d281deea221bc1c91a65de11a8e3d3776c3665dfccfedb7e2eb882cbbb7ffc0b8ae9195dc21d2db133327bcd1d9d70c4f6dfe71355bc6ae85b4b3ab8f5fb6d95545d8b1b1c5ee1411466ff85e3e20b228376fd52cbde50a19b79c2bfb23ad6a874f9534a623fc099e783344dba5541b64bc6cd49eab38a9825aaf1eefd3f3b45d01daea918b2eb7491d5eade6ac60829925c39ef860b3f618f5f54e1ca0243fef86d221622140aa0eafd50fff3ccccf8d03d52c9b02cd6e2de8d4f8006b862c5d93ad56e0cda15696c4a7920dd12c9eed4d2cde1c944b177f5d815786cecde67ebb5df962dde577e6928f8e3ad0e32a02e11cddb7fa113592b686ad97d03a0296d5cc84d9bd5b7d7755cae812239e2879baf2ab31927febb90a26c2f4a6adc8cd4e7ae12a72b46f4bb90a9b9ecfede9d4a2c83ad9ddd94734753bee9d62c103eb829186f38283c19f6b6f717af973c5605b5f55a6132350985d9860531a273ecafcfe938e402d144fd3839749a7246d46141ce21fc8d34c5180b9d74e20b2ae1a911318f9d590415f872ede31bc96f1c4e43429a563392bc08d49b3487b2d9e719b548ba2491b16700375e342d70655f9bdfb873937ac26815c68e778e9ef6180d59e3d395453017c13c5a22ec481062d0c2aa2a3cbfff4b5ead05d3f590d607ef7e2102da00b94b450ecd93c9b3193e43cd763ac6337001c7e820716ef6495cbb9678a07bc3bcd3b54dbf6e356d955e0b761d2e0a88c99e41a2f6b20c4186cebad451d84c9c333bafc61ec01fcd9bd3f22598f82a377e4d4fb8ae85ca961df68809e3b5ab4265dedafe1ecae528a522c91a448be84f8dd90a55f2edc487af0fd7e49f177523fc506e64ea2fe9041adf2315afb637c08100fc7f04f5f4967ed1be7b9f903f293f67f793d9ba1153d021c19025864c08415f60322be2de885ec479d95f5ef83875a622075a7e1792d55c5d1708149974334de0c3f6116f0319da59ee291ab25414aaeb491449ccd05441dfdba3ce8620de55c2b22b5762288de17f7f6bc3dd27349020498c7099feb96964296ea80e1a6248aa99f098960db112ac66e4994fd0d35bfe17e7133e3bee1a990e6029cc52a59a6004cdc52697326e99e0e52a091ff135e8bac3d3c4d6305ba187b61b1dfd142813c53f8bacfd358789d2bbc6d782b6e776479b5b94fd374b0856e56357bf9c914744d89bce8552137f9268e0609f260235b8d61427a70e4bbe0298b93e74de8cf2db943599c591eec7d12856e17eb53d90a638f1f3d333c8fd41293c6ed49d87bbb67db0e62291894bd9005dae89213715584ada7a1bdf64796e34c0912d41fb7fa80d8b208a7f852c4650ed166bb9318619379083b5d87b1b271025a8e7192cb588bef654f7b1fe53106a41288b35d6c8af954620d244dc24c119c1f66fe33c65bc7d132273e5d31eade3923ac081627f09ce1d08fb6c4df164d978131139e9218d8f76b13454fc747de1f66ffd6a66d7ba27ba0e37fa0231430a21e9096b50e3ee8eb9639bde20dac28a911cd6495936e159093fc63c7954000d82fa47837dd096b90a52de59f3e181f66126139251df06b20d0863e35d8a9dc072682a3d68a52b6be356ad75c82010dae45572b08e53109bb3033499841360ca538e5fcc04f53f2b038710c9bcd1e1f7d47fd4b37786d98162d98c445ba48f65e8ad3c622c8d07460e61292ab7481985aae48d7daf5f6ad7f6903b69a39adbfc87ad976cb6b08b0f2c27018796f6bab8504fe74e11c08f43d04a2519728e7897b74969ea9609f39274cf7f96beb5831f11f96c150644bf3a94a6f8d042eb27c17d076e0e6225761a3d2122d6c63c1b7f8ccc28bb253335d65c46067633d7184c68164d532c1803128ae39b1879819c06e8491e9a8c996f5f27b71d044249486b98ab7e1ef3f32779ef16f1d8e9df39995c53cda38295b7aaf74640f8f30142aac3b4cbaef356adccd9a43ad27d3d70c7ca92595f262369fe30ba8608164fd62cf7e16a9ac353929c48b139bc2257cf26a1d54447424c919abf01bf5cd212b7444e941b65fabc5e754fe72ba0c4ed0c70c588d43f98e5641c6db57074e9b9e1d2c41fc3196f8bf3a071bc212a3175c232de0662d4fc5ce97c02ff5aca85d81ff72625ec6f0ac83d3f29f2dcaf644c8ed646406ba100ee53cd0c8faee3102cea44b03f3a6795af514b5b1f267dfc893b14d7e8c19f947c5d079ef2f99df1ed4c412773e65471aef12c2b53f804c944425974f34c241bdcae49325c28773d3b9b5efd572d5bff481682829a9df123ef2ddba6582de09efdc14482eb833ec94eb8b1ac6e8cb7c50f242e5b2b9a3c6c71e33819c01e3285ae7e67da109f3d03c04891b1d3fda94315b12362cb98a6e2d9d96749ce2bc3d1a5ad9cdb0eedb21022655121e959c217d9059cec9d5ab33e5308186a62276d44006f6b7db3cb882b62ae7fd8efc53ce5c45047721a2b3894fa93c52836cf516c8027a7a3a655a63d913f15c03ed267ca3c88ed0413c9169c66cff476fbd864f5e349a018b6373853f4b1778382a3972f0835622f35ba652c29b294283ebdeac6ff8747db9689c917d886c3c26f547750208b892ea07a9093aba69d900fc2f81401f1c177516c6a9342dbf9a2dedee22d0f6e2219b1f3e62dc05bac58696d339fbf82ab297a6ae0dc4bb1aae315668f061518fe66a4c1497ae5cd457ed42ab2eafbe6817562a2ce1484be4b4e67144b4b88c0094b752918bfa0c731dbd06e8a43b274d9da80d0daef2b457213c7ec1eb7f91e9cb3cce6d6914abbc1a4ee8cdb57cf83fce22d964eb480fdcbcc36101bc4f2cc4810b88549c69b297911324fec604fc28001f82342886b268ba792d193a5ff1d6f58dd6277fd0db8e1eb058514b35cd748eec46f9b2953ab1e899260d221545998884356fb26606477ff58c23b7d9324a2189faaa41e0dfb77b4eb572d75ba9ff803fdc0ba3eda0a64c9254451d43a9c8d89886aff68b3a3cdc27d7eccc052401bb35300d1b72219213a0d80ded181dc7ab2c795031318050cec92d002e3f10bddca4ff7"}, @enc_lim={0x4, 0x1, 0x80}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x7, [0x4, 0xffffffff80000001, 0x2, 0x3]}}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x48, {0x0, 0x10, 0x2, 0x80, [0x9, 0x7, 0xffffffffffffff7f, 0x5, 0x80000000, 0x7, 0x8, 0x9]}}]}}}, @rthdrdstopts={{0x58, 0x29, 0x37, {0x87, 0x7, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x20, {0x0, 0x6, 0x20, 0x7f, [0x3ff, 0xff, 0xe800000000000000]}}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r9}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x60b}}, @flowinfo={{0x14, 0x29, 0xb, 0x80000000}}], 0x14d8}}], 0x4, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x28}, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 1866.204378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:51:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0xff0f) 07:51:55 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x3, 0x14ea, "14868f", 0x2}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) 07:51:55 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe, 0x0, 0x0, 0x0) 07:51:55 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x6) [ 1866.289903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:51:55 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:51:55 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r7) stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)) getegid() r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(0x0, r9, 0xee01) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010003000000000002000300", @ANYRES32=r1, @ANYRES16, @ANYRES32, @ANYBLOB="02000000", @ANYRES32=r3, @ANYBLOB="02000600", @ANYRES32=r5, @ANYBLOB="02b9f2bc28eef304012cb80000009821b443ffb39207572e45ddb8d275adb1e2", @ANYRES32=r7, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000200", @ANYBLOB="77dce26447e0f5d05f7be863fa87506ff877bc6a028ebc8bed4ddea9a54e394a14a006e1089a4a99da5c7169e3248fbb6a5c646904a887f606b1590f97af2185c3200cde06925b611418a4c3387c68049cdb84a8e39e0fd02298b17feeec4b1d8c3ad8fbec5cf981d50638d6e0ad6a853e459db6516b24bd314e541e6faf07f4e52b948054ff2d2ea4c65c43113bd66c6b1748fbb8dab9d426fc8966ef516198bb7c3125a16bcdeccfe759fc9d7fb0774b199f072b7e67546a6fe3498d3e6de8adc101bdb02b2e5f3d4d2456e44bf28f0a9cb6d23e", @ANYBLOB="040004000000000008000000", @ANYRESHEX, @ANYBLOB="08000400", @ANYRES32=r9, @ANYBLOB='\x00'], 0x6c, 0x0) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:51:55 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x80000) 07:51:55 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf, 0x0, 0x0, 0x0) [ 1867.069356] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1867.230079] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1867.230356] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 1867.232226] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1868.453294] Bluetooth: hci3: command 0x0406 tx timeout [ 1868.978616] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1868.983624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1868.994293] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1869.000996] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1869.005316] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1871.077117] Bluetooth: hci7: command tx timeout [ 1873.125365] Bluetooth: hci7: command tx timeout [ 1875.174168] Bluetooth: hci7: command tx timeout [ 1877.221519] Bluetooth: hci7: command tx timeout [ 1885.865856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1885.866975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1885.942415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1885.943738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1886.230857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1886.236099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1886.239734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:52:24 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x4, 0xffffffffffffffff, 0xb) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000200)=""/5, 0x5, 0x1, &(0x7f0000000240)={0x0, 0x3938700}) ppoll(&(0x7f0000000000)=[{r0, 0xa0}], 0x1, &(0x7f0000000080)={r1, r2+10000000}, &(0x7f00000000c0)={[0xfffffffffffffffa]}, 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) epoll_pwait2(r4, &(0x7f0000000140)=[{}, {}, {}], 0x3, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f00000001c0)={[0x2]}, 0x8) ioctl$HCIINQUIRY(r3, 0x400448c9, 0x0) 07:52:24 executing program 7: syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000001580)=ANY=[@ANYBLOB="b80a0100ffffffffffff505050505050"], 0x748) syz_80211_inject_frame(&(0x7f0000000480), &(0x7f00000004c0)=@data_frame={@no_qos=@type10={{}, {}, @initial, @broadcast}}, 0x18) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc}, {}, @device_b, @from_mac, @device_b}, {0x8}}, {@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xd, 0x8}, @broadcast}, {0x8, 0x0, 0x3, 0x1, 0xa9}}}, @ver_80211n={0x0, 0xcf}}}, 0x3e) 07:52:24 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x7) 07:52:24 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0x2, 0xfff, "26f5b3", 0xe9, 0x5}) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:52:24 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x2, 0x0) 07:52:24 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0xa0ff20) 07:52:24 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0xbe) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0xfff, 0x4) 07:52:24 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r7) stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)) getegid() r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(0x0, r9, 0xee01) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010003000000000002000300", @ANYRES32=r1, @ANYRES16, @ANYRES32, @ANYBLOB="02000000", @ANYRES32=r3, @ANYBLOB="02000600", @ANYRES32=r5, @ANYBLOB="02b9f2bc28eef304012cb80000009821b443ffb39207572e45ddb8d275adb1e2", @ANYRES32=r7, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000200", @ANYBLOB="77dce26447e0f5d05f7be863fa87506ff877bc6a028ebc8bed4ddea9a54e394a14a006e1089a4a99da5c7169e3248fbb6a5c646904a887f606b1590f97af2185c3200cde06925b611418a4c3387c68049cdb84a8e39e0fd02298b17feeec4b1d8c3ad8fbec5cf981d50638d6e0ad6a853e459db6516b24bd314e541e6faf07f4e52b948054ff2d2ea4c65c43113bd66c6b1748fbb8dab9d426fc8966ef516198bb7c3125a16bcdeccfe759fc9d7fb0774b199f072b7e67546a6fe3498d3e6de8adc101bdb02b2e5f3d4d2456e44bf28f0a9cb6d23e", @ANYBLOB="040004000000000008000000", @ANYRESHEX, @ANYBLOB="08000400", @ANYRES32=r9, @ANYBLOB='\x00'], 0x6c, 0x0) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) [ 1895.355396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1895.358642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1895.364621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:52:24 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r7) stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)) getegid() r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(0x0, r9, 0xee01) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010003000000000002000300", @ANYRES32=r1, @ANYRES16, @ANYRES32, @ANYBLOB="02000000", @ANYRES32=r3, @ANYBLOB="02000600", @ANYRES32=r5, @ANYBLOB="02b9f2bc28eef304012cb80000009821b443ffb39207572e45ddb8d275adb1e2", @ANYRES32=r7, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000200", @ANYBLOB="77dce26447e0f5d05f7be863fa87506ff877bc6a028ebc8bed4ddea9a54e394a14a006e1089a4a99da5c7169e3248fbb6a5c646904a887f606b1590f97af2185c3200cde06925b611418a4c3387c68049cdb84a8e39e0fd02298b17feeec4b1d8c3ad8fbec5cf981d50638d6e0ad6a853e459db6516b24bd314e541e6faf07f4e52b948054ff2d2ea4c65c43113bd66c6b1748fbb8dab9d426fc8966ef516198bb7c3125a16bcdeccfe759fc9d7fb0774b199f072b7e67546a6fe3498d3e6de8adc101bdb02b2e5f3d4d2456e44bf28f0a9cb6d23e", @ANYBLOB="040004000000000008000000", @ANYRESHEX, @ANYBLOB="08000400", @ANYRES32=r9, @ANYBLOB='\x00'], 0x6c, 0x0) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:52:24 executing program 1: ioctl$CDROMSEEK(0xffffffffffffffff, 0x5316, &(0x7f0000000000)={0x4, 0x1, 0x5, 0x7f, 0x20, 0x6}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448c9, 0x0) fcntl$addseals(r0, 0x409, 0xa) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d2, 0x0) 07:52:24 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0xf0) 07:52:24 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x3, 0x0) 07:52:24 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0xb0ff20) 07:52:24 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r7) stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)) getegid() r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(0x0, r9, 0xee01) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000010003000000000002000300", @ANYRES32=r1, @ANYRES16, @ANYRES32, @ANYBLOB="02000000", @ANYRES32=r3, @ANYBLOB="02000600", @ANYRES32=r5, @ANYBLOB="02b9f2bc28eef304012cb80000009821b443ffb39207572e45ddb8d275adb1e2", @ANYRES32=r7, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000200", @ANYBLOB="77dce26447e0f5d05f7be863fa87506ff877bc6a028ebc8bed4ddea9a54e394a14a006e1089a4a99da5c7169e3248fbb6a5c646904a887f606b1590f97af2185c3200cde06925b611418a4c3387c68049cdb84a8e39e0fd02298b17feeec4b1d8c3ad8fbec5cf981d50638d6e0ad6a853e459db6516b24bd314e541e6faf07f4e52b948054ff2d2ea4c65c43113bd66c6b1748fbb8dab9d426fc8966ef516198bb7c3125a16bcdeccfe759fc9d7fb0774b199f072b7e67546a6fe3498d3e6de8adc101bdb02b2e5f3d4d2456e44bf28f0a9cb6d23e", @ANYBLOB="040004000000000008000000", @ANYRESHEX, @ANYBLOB="08000400", @ANYRES32=r9, @ANYBLOB='\x00'], 0x6c, 0x0) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:52:24 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x5, 0x800) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="18", @ANYRES32=r0, @ANYBLOB="00000000040000002e2f66696c653000"]) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/handlers\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448c9, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r5, 0xc0603d0f, 0x0) ioctl$HIDIOCGFEATURE(r5, 0xc0404807, &(0x7f0000000200)={0x40, "d3bf60785ef9360471a6167840645e5707f4891a1c4741b975431af456f96f152e3f9a09ad8c870e74d3a1fb92273113e73a8627633c34f0175258bbec27731b"}) read$hidraw(0xffffffffffffffff, &(0x7f0000000700)=""/4096, 0x1000) ioctl$PTP_PIN_GETFUNC2(r3, 0xc0603d0f, 0x0) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000080)={0xff, "0ec740ca4bfe9b02b3d1f2f180d709e21223ce8025c53bd82dfaf637fa5f8c6fed4e9cd98e03ed0fdeae3771b6a8df44f91d28a6f62ed0d9345ec17bac063d09"}) sendfile(r1, r2, 0x0, 0x1) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x28, &(0x7f0000000000)=0x9, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000180)={0x0, 'bond_slave_0\x00', 0x4}, 0x18) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f00000001c0)=0x1, 0x4) ioctl$HCIINQUIRY(r0, 0x400448dd, 0x0) 07:52:24 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x4, 0x0) [ 1896.309771] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1896.311686] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1896.441553] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1896.444297] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1896.450560] Bluetooth: hci0: Opcode 0x0c03 failed: -4 07:52:35 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x240) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) 07:52:35 executing program 6: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x20ddfe02d33d98a0, 0x2, 0x2}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448c9, 0x0) sendmsg$inet(r1, &(0x7f0000000880)={&(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000200)="a27ee51e2de2c493b81cd4f02abbc3a02cccbb62f3bcc31bc65d1ef6dfe366722635fa280ddb4d2de2649ad9c90d058d1a35cf7d000eb71793614fe5fe39c72921547d2ca60412a3d6e0c49be7f7152216d7e0cd6b4f90b6e95bb2239be7a1", 0x5f}, {&(0x7f0000000280)="f9cb1a1a376be5e5cffb35e7ad67bf44f7ce7d2e99cfe87e9273245aa9940e591a71b0a9b391ed05fe3ac193d68dbce390b4e448de4368427bd5dc33237e77dc31a79cf90975c4d389a15410104fa9d7e9144e7e2ae5dc8577bf8d6b0d5d313aba5f156bd8558a5b2b75e123ad0a6a28482ac7e2f81d1eddf0817a67f97992f5990b896b0c71cd5660467da8f4775c9ce891c8c6eb32706397f0f0393860787b059fee2af59af1f89c5f", 0xaa}, {&(0x7f00000003c0)="2504567eb4fed72f9008e59f09ed60c089f3adbfe20d640d4e8e20a731a2c2644f01eefe129c0aeb18d78ffd599dd43f4c0a7108b2ece96d3c1ea3a37eb460d074cbbdd25e1f77faa1cfb9920771f5c3ae34e6f74326a61b1928f620abf5ab648e5593573ec35c55c9e10c5fa13b5612b4b8f04a5bef2c826e596e62dd9873154bb7d5dd9b1c73e11a72ef08ddc60c79ca2a94ba7339d7cc3e77097b653e", 0x9e}, {&(0x7f0000000480)="8d0f00dae15f0f127f05189a5093836719e35d6659af5adbf3ef7b54c8776cdc7d9ce69ac87feffd040fe0f456ae137e81796496e383401a06930854c10ff86a15026ed408362e4cee58e7381b0e03bfabaeec56f320803d83c9f755e65c6353eaf37722291d24643692d04565f067c1e673126b68ec1d59f6c99270e8d7d6bdf1e61bfdf43d61238ae26fa60bbfe4d7d9a739e5c19fb3456d3f6ad4654df41bfd8107ffdecb78c31407b47c953dc073f3b0dc0041e40bb2bda3a9bcc33495f07af048ebffeac2e17646ed008e5b1d8ac350bc651a1089372d7ce629af40e42ce9886d4a6aa74316", 0xe8}, {&(0x7f0000000580)="61165f9d36a03401849f2f16b7fb378aefd5db2f90a10a6226c2c98db599292d174ddf49f29387db1af519cbf4f74e014d82fefa43ac10b2da95f37f425a8562a0ae720b7b35970e96437b10dc020249a2882c3c", 0x54}, {&(0x7f0000000600)="2e48dec2c7a85d8269e588e58d704747a90a", 0x12}, {&(0x7f0000000640)="f32077fa3c492b5dad9695c23ad51e055dc3fb8985c0f4b9948da4528c8e0273aec06108b26813fbd2e92e9eda4e610a3b37e74b0dd8e15068b38af1a56901af2f7aeb28ed4eff364074c13801abadd223a904305b0e9eae6c960221f629d3656abbb0667dec3363c4ca7165dbd7707513985dac971c83be899d3ad2564f0d3851011d788fc3f2ab1f78c2635970052960c72ad584feee8dee9df23a5934d7e361ba732708c2e7d468f47393", 0xac}, {&(0x7f0000000700)="d0e5708d3efbe598896376984e88cddee2b5acbad422c2b16e9f85eac69e764ae3ac0157f03ca494b2b233f66ca1071862d8b1bd62fa13c3bdc35113322b0a259682cc0be00fae01f666641c85671faa013eb2d8e7a7bd55cd1b7f47228b6add242cf938124acfcc937690f4fc1cea2ff9f84c3e4f52fd2dd03631743f1a0c7d0078bea1565f607c917d4c4ec4825d8f7b10ce403b0d1cd04c", 0x99}], 0x8, &(0x7f0000000840)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff0}}], 0x18}, 0x1) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000080)=""/107) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = gettid() ioprio_get$pid(0x2, r3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x5, 0x3f, 0x1, 0x4, 0x0, 0x5, 0x2000, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000100), 0x2}, 0xc00, 0x99, 0x3, 0x6, 0x4, 0x200, 0x800, 0x0, 0x47, 0x0, 0x1f}, r3, 0x9, 0xffffffffffffffff, 0xb) ioctl$HCIINQUIRY(r2, 0x400448dd, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000900)=@buf={0xd, &(0x7f00000008c0)="244b134e389cfd8cf6cc6e54f5"}) 07:52:35 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0xd0ff20) 07:52:35 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x5, 0x0) 07:52:35 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x300) 07:52:35 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r7) stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)) getegid() r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setresgid(0x0, r9, 0xee01) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:52:35 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:52:35 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2262, &(0x7f0000003a00), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x6, 0x0, r1) r2 = pidfd_open(0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x6, 0x0, 0x0, 0x5, 0xc, 0x1, {0x0, r1, r2}}, 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0xffffffffffffff27, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000340), 0x2a00, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000800)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000000a80)={&(0x7f0000000380), 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x1b4, r7, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r9 = accept4(0xffffffffffffffff, &(0x7f0000000b00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000b80)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000010c0)={'batadv0\x00', 0x0}) recvmsg(r9, 0x0, 0x40000000) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000003980)={0x124, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000014}, 0x5) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="8018e9505b00009078424abea0483b7b00"/32]}) ioctl$HCIINQUIRY(r3, 0x800448d2, 0x0) 07:52:35 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x1000000) 07:52:35 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r7) stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)) getegid() r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:52:35 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x500) 07:52:35 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:52:35 executing program 5: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x6000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x6, 0x0) 07:52:35 executing program 0: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xf000) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8001, &(0x7f0000000040)=0xffffffff, 0x202, 0x2000000) 07:52:35 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r7) stat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)) getegid() socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$HCIINQUIRY(r0, 0x800448d2, 0x0) 07:52:35 executing program 1: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448c9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$dupfd(r0, 0x406, r3) r4 = dup(r2) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000040)={0x1, 0x400, "46a5a5", 0x4, 0x5}) ioctl$HCIINQUIRY(r1, 0x800448d2, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) [ 1907.264509] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1907.271689] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1907.648130] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1907.648388] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1907.650827] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 1908.837136] Bluetooth: hci1: command 0x0406 tx timeout [ 1910.886354] Bluetooth: hci1: command 0x0406 tx timeout [ 1915.394036] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) [ 1919.787448] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888015724fc0 (size 360): comm "syz-executor.3", pid 18058, jiffies 4296573341 hex dump (first 32 bytes): 00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00 .....N.......... ff ff ff ff ff ff ff ff a0 ee 6d 88 ff ff ff ff ..........m..... backtrace (crc a3d063e2): kmem_cache_alloc_noprof+0x397/0x470 alloc_empty_file+0x58/0x1e0 alloc_file_pseudo+0x12b/0x220 __anon_inode_getfile+0xe1/0x280 __do_sys_perf_event_open+0x18df/0x2c60 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88800cd480c0 (size 16): comm "syz-executor.3", pid 18058, jiffies 4296573341 hex dump (first 16 bytes): 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 35cdddfe): kmem_cache_alloc_noprof+0x397/0x470 security_file_alloc+0x35/0x130 init_file+0x95/0x4c0 alloc_empty_file+0x76/0x1e0 alloc_file_pseudo+0x12b/0x220 __anon_inode_getfile+0xe1/0x280 __do_sys_perf_event_open+0x18df/0x2c60 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88801cad21c0 (size 360): comm "syz-executor.3", pid 18091, jiffies 4296574171 hex dump (first 32 bytes): 00 00 00 00 ad 4e ad de ff ff ff ff 02 0a 03 13 .....N.......... ff ff ff ff ff ff ff ff a0 ee 6d 88 ff ff ff ff ..........m..... backtrace (crc 13da7a7d): kmem_cache_alloc_noprof+0x397/0x470 alloc_empty_file+0x58/0x1e0 alloc_file_pseudo+0x12b/0x220 __anon_inode_getfile+0xe1/0x280 __do_sys_perf_event_open+0x18df/0x2c60 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88800b5cbf40 (size 16): comm "syz-executor.3", pid 18091, jiffies 4296574171 hex dump (first 16 bytes): 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 35cdddfe): kmem_cache_alloc_noprof+0x397/0x470 security_file_alloc+0x35/0x130 init_file+0x95/0x4c0 alloc_empty_file+0x76/0x1e0 alloc_file_pseudo+0x12b/0x220 __anon_inode_getfile+0xe1/0x280 __do_sys_perf_event_open+0x18df/0x2c60 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: leak checking failed VM DIAGNOSIS: 07:52:49 Registers: info registers vcpu 0 RAX=0000000000af7897 RBX=0000000000000000 RCX=ffffffff84b85987 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c6b04 RBP=dffffc0000000000 RSP=ffffffff85a07e00 R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001 R12=ffffffff86439050 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84b846be RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55ef000 00000000 00000000 LDT=0000 fffffe6d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5d9b3a7080 CR3=000000000e675000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000415e10ae00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000abdbdd RBX=0000000000000001 RCX=ffffffff84b85987 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c6b04 RBP=dffffc0000000000 RSP=ffff888009717e58 R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001 R12=ffffffff86439050 R13=1ffff110012e2fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84b846be RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56ef000 00000000 00000000 LDT=0000 fffffe4000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc678297f0 CR3=000000000e675000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000415e10ae00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000