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", 0x1000}, {&(0x7f00000080c0)="7bcb927cfb768ef5f700569aac3ba47f1ff5590ebd77105f9e2b0a278ee881bf02e2422475a9c25e40ab1e6db4be8c0a4f00714e24eb9171442a1a31f4e0296fd19e87f79bfeb2ae18cbe0592b336069f7d8f769f085483febd2830d8b7542a73a05bc0a63657d200bdc6504815fb6d74edcdf117308ae7df988e09e2492fd070598645d203d683c75099cdf4b1f263ef7ee1598decd803b0b6f4518d262a3093e5e15feadb2d620f20258510796373d0f30a247aa3b1674d8", 0xb9}], 0x2}}], 0x6, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) close_range(r0, 0xffffffffffffffff, 0x0) 08:33:57 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r5, 0xffffffffffffffff, 0x0) dup3(r4, r5, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x2000}], 0x1, &(0x7f0000000040), &(0x7f0000000080)={[0xcd7]}, 0x8) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 08:33:57 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0xffffffffffffff28, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) close_range(r0, 0xffffffffffffffff, 0x0) 08:33:57 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:33:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a40)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) 08:33:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_IE={0x1b, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}, @challenge={0x10, 0x1, 0x25}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x48}}, 0x0) 08:33:57 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r5, 0xffffffffffffffff, 0x0) dup3(r4, r5, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x2000}], 0x1, &(0x7f0000000040), &(0x7f0000000080)={[0xcd7]}, 0x8) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) 08:33:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0045878, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:33:57 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r0 = inotify_init1(0x0) syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) close_range(r0, 0xffffffffffffffff, 0x0) 08:33:57 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a40)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) 08:33:57 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) fcntl$dupfd(r2, 0x0, r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) dup3(r3, r4, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x2000}], 0x1, &(0x7f0000000040), &(0x7f0000000080)={[0xcd7]}, 0x8) 08:33:57 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x2, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:33:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_IE={0x1b, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}, @challenge={0x10, 0x1, 0x25}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x48}}, 0x0) 08:33:57 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x80045400, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:33:57 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r3, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 08:33:57 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0045878, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:33:57 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r2, r3, 0x0) read(r0, &(0x7f0000000240)=""/159, 0x9f) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x48, 0x1, 0x4, 0x5, 0x0, 0x0, {0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x1f, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0x892, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x40091) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140), 0x6) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x5338) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000000)=0xfffffff9, 0x4) 08:34:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a40)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) 08:34:08 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0x80000000) dup3(r0, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r6, 0xffffffffffffffff, 0x0) dup3(r5, r6, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f0000000000)=ANY=[@ANYBLOB="fdffffff0014edff0000"]) 08:34:08 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0xffffffa5, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0x9}}, './file0\x00'}) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000180)={0x2, 0x7, "95f71b", 0x75, 0x81}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1001) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x4}, 0x6) 08:34:08 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x80045400, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:34:08 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:34:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_IE={0x1b, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}, @challenge={0x10, 0x1, 0x25}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x48}}, 0x0) 08:34:08 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r3, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 08:34:08 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x3, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:34:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_IE={0x1b, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}, @challenge={0x10, 0x1, 0x25}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x48}}, 0x0) 08:34:08 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r1, r2, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xff, 0x4, 0x5, 0x9, 0x0, 0x7, 0x200, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xf65, 0x4, @perf_config_ext={0x7, 0xfc11}, 0x4600d, 0x739e, 0xd5, 0x8, 0x5, 0xf335, 0x5, 0x0, 0x8, 0x0, 0xfffffffffffff801}, 0xffffffffffffffff, 0x4, r2, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000440), 0x143201, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e24, 0x5, @remote, 0x7}, 0x1c) 08:34:08 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x4, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:34:08 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0189436, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:34:08 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:34:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 08:34:08 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r3, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) 08:34:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_IE={0x1b, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}, @challenge={0x10, 0x1, 0x25}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x48}}, 0x0) 08:34:19 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000280)=@rc, &(0x7f0000000300)=0x80) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}}, 0x20004825) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x3, 0x1, 0x40, 0x0, 0x2d0c82c0, 0x81388, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x1, @perf_bp={&(0x7f0000000000), 0xe}, 0x2, 0x3, 0x7fff, 0xc, 0x5, 0x8, 0x1, 0x0, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) creat(&(0x7f0000000180)='./file0\x00', 0x163) bind$bt_hci(r1, &(0x7f0000000140), 0x6) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x9c, 0x2, 0x2, 0x0, 0x37ed, 0x80040, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x2, 0x6}, 0x800, 0x5, 0xa43, 0x0, 0x800, 0x1, 0x800, 0x0, 0x3, 0x0, 0x6}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) 08:34:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a40)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) 08:34:19 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 08:34:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) (fail_nth: 1) 08:34:19 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x5, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:34:19 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, r0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) 08:34:19 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc020660b, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:34:19 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) [ 1122.695026] FAULT_INJECTION: forcing a failure. [ 1122.695026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1122.696111] CPU: 0 UID: 0 PID: 9397 Comm: syz-executor.4 Not tainted 6.17.0-rc1-next-20250815 #1 PREEMPT(voluntary) [ 1122.696127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1122.696134] Call Trace: [ 1122.696138] [ 1122.696143] dump_stack_lvl+0xfa/0x120 [ 1122.696163] should_fail_ex+0x4d7/0x5e0 [ 1122.696186] _copy_from_user+0x30/0xd0 [ 1122.696206] copy_msghdr_from_user+0x88/0x150 [ 1122.696221] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1122.696236] ? __pfx_perf_trace_lock+0x10/0x10 [ 1122.696254] ? lock_acquire+0x15e/0x2f0 [ 1122.696270] ___sys_sendmsg+0xdc/0x1b0 [ 1122.696283] ? __pfx____sys_sendmsg+0x10/0x10 [ 1122.696294] ? perf_trace_lock+0xb5/0x5d0 [ 1122.696310] ? __pfx_perf_trace_lock+0x10/0x10 [ 1122.696321] ? proc_fail_nth_write+0x97/0x220 [ 1122.696342] ? lock_acquire+0x15e/0x2f0 [ 1122.696354] ? __fget_files+0x34/0x3b0 [ 1122.696371] ? find_held_lock+0x2b/0x80 [ 1122.696386] ? __fget_files+0x203/0x3b0 [ 1122.696401] ? lock_release+0xc8/0x290 [ 1122.696416] ? __fget_files+0x20d/0x3b0 [ 1122.696439] __sys_sendmsg+0x150/0x200 [ 1122.696451] ? __pfx___sys_sendmsg+0x10/0x10 [ 1122.696466] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1122.696489] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1122.696507] ? ksys_write+0x1a3/0x240 [ 1122.696525] ? __pfx_ksys_write+0x10/0x10 [ 1122.696549] do_syscall_64+0xbf/0x360 [ 1122.696564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.696578] RIP: 0033:0x7f0ba94ffb19 [ 1122.696587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1122.696598] RSP: 002b:00007f0ba6a75188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1122.696610] RAX: ffffffffffffffda RBX: 00007f0ba9612f60 RCX: 00007f0ba94ffb19 [ 1122.696618] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1122.696625] RBP: 00007f0ba6a751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1122.696632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1122.696638] R13: 00007ffc1427ed2f R14: 00007f0ba6a75300 R15: 0000000000022000 [ 1122.696658] 08:34:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a40)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) 08:34:29 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0505405, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:34:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 08:34:29 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, r0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 08:34:29 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:34:29 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x6, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:34:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) (fail_nth: 2) 08:34:29 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x46de, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xfffc}, 0x6) 08:34:29 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) [ 1133.138139] FAULT_INJECTION: forcing a failure. [ 1133.138139] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.139923] CPU: 1 UID: 0 PID: 9420 Comm: syz-executor.4 Not tainted 6.17.0-rc1-next-20250815 #1 PREEMPT(voluntary) [ 1133.139955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1133.139968] Call Trace: [ 1133.139976] [ 1133.139985] dump_stack_lvl+0xfa/0x120 [ 1133.140021] should_fail_ex+0x4d7/0x5e0 [ 1133.140065] should_failslab+0xc2/0x120 [ 1133.140102] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 1133.140136] ? __alloc_skb+0x2ab/0x370 [ 1133.140169] __alloc_skb+0x2ab/0x370 [ 1133.140191] ? __pfx___alloc_skb+0x10/0x10 [ 1133.140220] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1133.140256] netlink_alloc_large_skb+0x69/0x150 [ 1133.140284] netlink_sendmsg+0x676/0xd80 [ 1133.140318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1133.140363] ____sys_sendmsg+0xa67/0xc20 [ 1133.140397] ? copy_msghdr_from_user+0xfb/0x150 [ 1133.140422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1133.140467] ? lock_acquire+0x15e/0x2f0 [ 1133.140505] ___sys_sendmsg+0x10f/0x1b0 [ 1133.140531] ? __pfx____sys_sendmsg+0x10/0x10 [ 1133.140553] ? perf_trace_lock+0xb5/0x5d0 [ 1133.140584] ? __pfx_perf_trace_lock+0x10/0x10 [ 1133.140607] ? proc_fail_nth_write+0x97/0x220 [ 1133.140647] ? lock_acquire+0x15e/0x2f0 [ 1133.140669] ? __fget_files+0x34/0x3b0 [ 1133.140701] ? find_held_lock+0x2b/0x80 [ 1133.140731] ? __fget_files+0x203/0x3b0 [ 1133.140761] ? lock_release+0xc8/0x290 [ 1133.140790] ? __fget_files+0x20d/0x3b0 [ 1133.140836] __sys_sendmsg+0x150/0x200 [ 1133.140861] ? __pfx___sys_sendmsg+0x10/0x10 [ 1133.140900] ? __pfx_ksys_write+0x10/0x10 [ 1133.140948] do_syscall_64+0xbf/0x360 [ 1133.140978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.141002] RIP: 0033:0x7f0ba94ffb19 [ 1133.141020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1133.141042] RSP: 002b:00007f0ba6a75188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1133.141064] RAX: ffffffffffffffda RBX: 00007f0ba9612f60 RCX: 00007f0ba94ffb19 [ 1133.141079] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1133.141092] RBP: 00007f0ba6a751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1133.141106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.141119] R13: 00007ffc1427ed2f R14: 00007f0ba6a75300 R15: 0000000000022000 [ 1133.141158] 08:34:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 08:34:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a40)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) 08:34:29 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x80000}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:34:30 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:34:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 08:34:39 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:34:39 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:34:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) (fail_nth: 3) 08:34:39 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x2b, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:34:39 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, r0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 08:34:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a40)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) 08:34:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:34:39 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x2c, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:34:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 08:34:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:34:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 08:34:39 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x33, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:34:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) (fail_nth: 4) 08:34:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a40)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) 08:34:39 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:34:39 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, r0) socket$inet6_udp(0xa, 0x2, 0x0) 08:34:39 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x3c, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:34:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:34:48 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, r0) 08:34:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 08:34:48 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x80000}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:34:48 executing program 2: ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x0, &(0x7f0000000200)={0xfffffffb, {{0xa, 0x4e20, 0x100, @mcast1, 0x20}}, {{0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x20}}}, 0x108) close_range(r1, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r2, r3, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48810}, 0x50) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140), 0x6) 08:34:48 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x60, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:34:48 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a40)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) 08:34:48 executing program 7: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:34:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) (fail_nth: 5) 08:34:48 executing program 7: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:34:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) (fail_nth: 6) [ 1152.060851] FAULT_INJECTION: forcing a failure. [ 1152.060851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1152.061937] CPU: 0 UID: 0 PID: 9499 Comm: syz-executor.4 Not tainted 6.17.0-rc1-next-20250815 #1 PREEMPT(voluntary) [ 1152.061954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1152.061961] Call Trace: [ 1152.061965] [ 1152.061970] dump_stack_lvl+0xfa/0x120 [ 1152.061990] should_fail_ex+0x4d7/0x5e0 [ 1152.062013] _copy_from_iter+0x1dc/0x1660 [ 1152.062033] ? lock_acquire+0x15e/0x2f0 [ 1152.062046] ? __virt_addr_valid+0x1c6/0x5d0 [ 1152.062065] ? find_held_lock+0x2b/0x80 [ 1152.062082] ? __pfx__copy_from_iter+0x10/0x10 [ 1152.062099] ? lock_release+0xc8/0x290 [ 1152.062114] ? __virt_addr_valid+0x100/0x5d0 [ 1152.062132] ? __check_object_size+0x57b/0x880 [ 1152.062152] netlink_sendmsg+0x809/0xd80 [ 1152.062172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1152.062194] ____sys_sendmsg+0xa67/0xc20 [ 1152.062212] ? copy_msghdr_from_user+0xfb/0x150 [ 1152.062225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1152.062248] ? lock_acquire+0x15e/0x2f0 [ 1152.062262] ___sys_sendmsg+0x10f/0x1b0 [ 1152.062276] ? __pfx____sys_sendmsg+0x10/0x10 [ 1152.062287] ? perf_trace_lock+0xb5/0x5d0 [ 1152.062303] ? __pfx_perf_trace_lock+0x10/0x10 [ 1152.062314] ? proc_fail_nth_write+0x97/0x220 [ 1152.062335] ? lock_acquire+0x15e/0x2f0 [ 1152.062346] ? __fget_files+0x34/0x3b0 [ 1152.062363] ? find_held_lock+0x2b/0x80 [ 1152.062378] ? __fget_files+0x203/0x3b0 [ 1152.062394] ? lock_release+0xc8/0x290 [ 1152.062408] ? __fget_files+0x20d/0x3b0 [ 1152.062431] __sys_sendmsg+0x150/0x200 [ 1152.062444] ? __pfx___sys_sendmsg+0x10/0x10 [ 1152.062463] ? __pfx_ksys_write+0x10/0x10 [ 1152.062492] do_syscall_64+0xbf/0x360 [ 1152.062508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.062521] RIP: 0033:0x7f0ba94ffb19 [ 1152.062531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1152.062542] RSP: 002b:00007f0ba6a75188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1152.062553] RAX: ffffffffffffffda RBX: 00007f0ba9612f60 RCX: 00007f0ba94ffb19 [ 1152.062561] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1152.062568] RBP: 00007f0ba6a751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1152.062576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1152.062583] R13: 00007ffc1427ed2f R14: 00007f0ba6a75300 R15: 0000000000022000 [ 1152.062602] 08:34:48 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x68, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:34:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 08:34:59 executing program 7: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:34:59 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2={0x0}, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:34:59 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = getpgid(0x0) fcntl$lock(r0, 0x25, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r1}) r2 = fork() kcmp(r1, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, r1, 0xfffc000000000000, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140), 0x6) 08:34:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a40)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) 08:34:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) (fail_nth: 7) 08:34:59 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x1000000}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:34:59 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) [ 1162.515947] FAULT_INJECTION: forcing a failure. [ 1162.515947] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.517764] CPU: 0 UID: 0 PID: 9518 Comm: syz-executor.4 Not tainted 6.17.0-rc1-next-20250815 #1 PREEMPT(voluntary) [ 1162.517794] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1162.517806] Call Trace: [ 1162.517813] [ 1162.517822] dump_stack_lvl+0xfa/0x120 [ 1162.517853] should_fail_ex+0x4d7/0x5e0 [ 1162.517892] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1162.517922] should_failslab+0xc2/0x120 [ 1162.517957] __kmalloc_noprof+0xb4/0x4b0 [ 1162.517988] ? avc_has_perm_noaudit+0x150/0x3d0 [ 1162.518037] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1162.518075] genl_family_rcv_msg_doit+0xab/0x2f0 [ 1162.518104] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1162.518140] ? cap_capable+0xdb/0x3b0 [ 1162.518168] ? security_capable+0x2f/0x90 [ 1162.518204] ? ns_capable+0xe2/0x120 [ 1162.518238] genl_rcv_msg+0x532/0x7e0 [ 1162.518271] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1162.518298] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1162.518318] ? __pfx_nl80211_start_ap+0x10/0x10 [ 1162.518338] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1162.518381] netlink_rcv_skb+0x147/0x430 [ 1162.518406] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1162.518435] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1162.518485] ? netlink_deliver_tap+0x1ae/0xce0 [ 1162.518505] ? selinux_netlink_send+0x507/0x880 [ 1162.518535] ? is_vmalloc_addr+0x86/0xa0 [ 1162.518571] genl_rcv+0x28/0x40 [ 1162.518593] netlink_unicast+0x5a7/0x870 [ 1162.518624] ? __pfx_netlink_unicast+0x10/0x10 [ 1162.518666] netlink_sendmsg+0x8ac/0xd80 [ 1162.518698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1162.518740] ____sys_sendmsg+0xa67/0xc20 [ 1162.518772] ? copy_msghdr_from_user+0xfb/0x150 [ 1162.518795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1162.518832] ? perf_trace_lock_acquire+0xc9/0x700 [ 1162.518869] ___sys_sendmsg+0x10f/0x1b0 [ 1162.518894] ? __pfx____sys_sendmsg+0x10/0x10 [ 1162.518914] ? perf_trace_lock+0xb5/0x5d0 [ 1162.518943] ? __pfx_perf_trace_lock+0x10/0x10 [ 1162.518973] ? lock_acquire+0x15e/0x2f0 [ 1162.518994] ? __fget_files+0x34/0x3b0 [ 1162.519024] ? find_held_lock+0x2b/0x80 [ 1162.519052] ? __fget_files+0x203/0x3b0 [ 1162.519080] ? lock_release+0xc8/0x290 [ 1162.519108] ? __fget_files+0x20d/0x3b0 [ 1162.519152] __sys_sendmsg+0x150/0x200 [ 1162.519174] ? __pfx___sys_sendmsg+0x10/0x10 [ 1162.519229] do_syscall_64+0xbf/0x360 [ 1162.519257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.519280] RIP: 0033:0x7f0ba94ffb19 [ 1162.519297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1162.519317] RSP: 002b:00007f0ba6a75188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1162.519338] RAX: ffffffffffffffda RBX: 00007f0ba9612f60 RCX: 00007f0ba94ffb19 [ 1162.519352] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1162.519365] RBP: 00007f0ba6a751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1162.519378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1162.519390] R13: 00007ffc1427ed2f R14: 00007f0ba6a75300 R15: 0000000000022000 [ 1162.519427] 08:34:59 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:34:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_IE={0x1b, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}, @challenge={0x10, 0x1, 0x25}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x48}}, 0x0) 08:34:59 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x2000000}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:34:59 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2={0xf5}, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:34:59 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init1(0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:34:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a40)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) 08:34:59 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:34:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) (fail_nth: 8) 08:34:59 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init1(0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) 08:34:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_IE={0x1b, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}, @challenge={0x10, 0x1, 0x25}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x48}}, 0x0) 08:34:59 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2={0xf8}, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:34:59 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00') write$bt_hci(r1, &(0x7f00000000c0)={0x1, @disconn_logical_link={{0x43a, 0x2}, {0xaa}}}, 0x6) 08:34:59 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:35:09 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x6, 0x3, 0x1, 0x8, 0x0, 0x10000, 0x40, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x1}, 0x4006, 0x8000, 0xfffffffc, 0x3, 0x0, 0x6, 0x5, 0x0, 0x6}, 0x0, 0xc, r0, 0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x101000, 0x101) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x0, 0x3}, 0x6) 08:35:09 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x0, 0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:09 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) (fail_nth: 9) 08:35:09 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init1(0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) 08:35:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_IE={0x1b, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}, @challenge={0x10, 0x1, 0x25}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x48}}, 0x0) 08:35:09 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2={0xff, 0x3}, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) [ 1172.432205] FAULT_INJECTION: forcing a failure. [ 1172.432205] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.433154] CPU: 1 UID: 0 PID: 9567 Comm: syz-executor.4 Not tainted 6.17.0-rc1-next-20250815 #1 PREEMPT(voluntary) [ 1172.433171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1172.433178] Call Trace: [ 1172.433182] [ 1172.433187] dump_stack_lvl+0xfa/0x120 [ 1172.433210] should_fail_ex+0x4d7/0x5e0 [ 1172.433234] should_failslab+0xc2/0x120 [ 1172.433254] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 1172.433271] ? __alloc_skb+0x2ab/0x370 [ 1172.433288] __alloc_skb+0x2ab/0x370 [ 1172.433299] ? __pfx___alloc_skb+0x10/0x10 [ 1172.433312] ? genl_rcv_msg+0x532/0x7e0 [ 1172.433334] netlink_ack+0x167/0xbf0 [ 1172.433356] netlink_rcv_skb+0x344/0x430 [ 1172.433369] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1172.433385] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1172.433408] ? netlink_deliver_tap+0x1ae/0xce0 [ 1172.433419] ? selinux_netlink_send+0x507/0x880 [ 1172.433437] ? is_vmalloc_addr+0x86/0xa0 [ 1172.433457] genl_rcv+0x28/0x40 [ 1172.433469] netlink_unicast+0x5a7/0x870 [ 1172.433486] ? __pfx_netlink_unicast+0x10/0x10 [ 1172.433508] netlink_sendmsg+0x8ac/0xd80 [ 1172.433525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1172.433548] ____sys_sendmsg+0xa67/0xc20 [ 1172.433566] ? copy_msghdr_from_user+0xfb/0x150 [ 1172.433579] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1172.433602] ? lock_acquire+0x15e/0x2f0 [ 1172.433619] ___sys_sendmsg+0x10f/0x1b0 [ 1172.433632] ? __pfx____sys_sendmsg+0x10/0x10 [ 1172.433643] ? perf_trace_lock+0xb5/0x5d0 [ 1172.433659] ? __pfx_perf_trace_lock+0x10/0x10 [ 1172.433670] ? proc_fail_nth_write+0x97/0x220 [ 1172.433692] ? lock_acquire+0x15e/0x2f0 [ 1172.433703] ? __fget_files+0x34/0x3b0 [ 1172.433720] ? find_held_lock+0x2b/0x80 [ 1172.433735] ? __fget_files+0x203/0x3b0 [ 1172.433750] ? lock_release+0xc8/0x290 [ 1172.433765] ? __fget_files+0x20d/0x3b0 [ 1172.433789] __sys_sendmsg+0x150/0x200 [ 1172.433801] ? __pfx___sys_sendmsg+0x10/0x10 [ 1172.433821] ? __pfx_ksys_write+0x10/0x10 [ 1172.433846] do_syscall_64+0xbf/0x360 [ 1172.433861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.433875] RIP: 0033:0x7f0ba94ffb19 [ 1172.433885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1172.433895] RSP: 002b:00007f0ba6a75188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1172.433907] RAX: ffffffffffffffda RBX: 00007f0ba9612f60 RCX: 00007f0ba94ffb19 [ 1172.433914] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1172.433921] RBP: 00007f0ba6a751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1172.433928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1172.433935] R13: 00007ffc1427ed2f R14: 00007f0ba6a75300 R15: 0000000000022000 [ 1172.433955] 08:35:09 executing program 7: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:09 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init1(0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) 08:35:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) (fail_nth: 10) 08:35:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:35:21 executing program 7: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:21 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:35:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) (fail_nth: 11) 08:35:21 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x0, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:21 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_IE={0x1b, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}, @challenge={0x10, 0x1, 0x25}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x48}}, 0x0) 08:35:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000240)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@remote, 0x4e21, 0x3, 0x4e21, 0x0, 0x2, 0x0, 0x20, 0x87}, {0x1, 0x1, 0x757c, 0x6, 0x0, 0x0, 0x2, 0xae}, {0x5, 0x2, 0x8, 0x8}, 0x10001, 0x6e6bb9, 0x2, 0x1, 0x0, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0x2b}, 0x0, @in6=@loopback, 0x3505, 0x0, 0x0, 0x81, 0x1000, 0xb3, 0x80}}, 0xffffffffffffffad) dup3(r2, r3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r6, 0xffffffffffffffff, 0x0) dup3(r5, r6, 0x0) dup3(r5, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000140), 0x6) 08:35:21 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2={0xff, 0x5}, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:35:21 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:35:21 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, '\x00', 0x2}, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:35:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 08:35:21 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_IE={0x1b, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}, @challenge={0x10, 0x1, 0x25}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x48}}, 0x0) 08:35:21 executing program 7: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) (fail_nth: 12) 08:35:21 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x0, 0x80000}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xfff, 0x4}, 0x6) 08:35:21 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:35:21 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, '\x00', 0x3}, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:35:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 08:35:21 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:21 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_IE={0x1b, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}, @challenge={0x10, 0x1, 0x25}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x48}}, 0x0) 08:35:21 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:35:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 08:35:33 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:35:33 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x0, 0x1000000}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) (fail_nth: 13) 08:35:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_IE={0x1b, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}, @challenge={0x10, 0x1, 0x25}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x48}}, 0x0) 08:35:33 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:33 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, '\x00', 0x5}, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:35:33 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:35:33 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x0, 0x2000000}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_IE={0x1b, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}, @challenge={0x10, 0x1, 0x25}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x48}}, 0x0) [ 1196.356091] FAULT_INJECTION: forcing a failure. [ 1196.356091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1196.358438] CPU: 1 UID: 0 PID: 9653 Comm: syz-executor.4 Not tainted 6.17.0-rc1-next-20250815 #1 PREEMPT(voluntary) [ 1196.358469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1196.358488] Call Trace: [ 1196.358496] [ 1196.358505] dump_stack_lvl+0xfa/0x120 [ 1196.358538] should_fail_ex+0x4d7/0x5e0 [ 1196.358581] _copy_to_user+0x32/0xd0 [ 1196.358607] simple_read_from_buffer+0xe0/0x180 [ 1196.358641] proc_fail_nth_read+0x18a/0x240 [ 1196.358678] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1196.358713] ? security_file_permission+0x22/0x90 [ 1196.358746] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1196.358780] vfs_read+0x1eb/0xc70 [ 1196.358822] ? __pfx_vfs_read+0x10/0x10 [ 1196.358857] ? lock_release+0xc8/0x290 [ 1196.358888] ? __fget_files+0x20d/0x3b0 [ 1196.358936] ksys_read+0x121/0x240 [ 1196.358967] ? __pfx_ksys_read+0x10/0x10 [ 1196.359014] do_syscall_64+0xbf/0x360 [ 1196.359044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.359068] RIP: 0033:0x7f0ba94b269c [ 1196.359086] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1196.359107] RSP: 002b:00007f0ba6a75170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1196.359129] RAX: ffffffffffffffda RBX: 000000000000002c RCX: 00007f0ba94b269c [ 1196.359144] RDX: 000000000000000f RSI: 00007f0ba6a751e0 RDI: 0000000000000004 [ 1196.359158] RBP: 00007f0ba6a751d0 R08: 0000000000000000 R09: 0000000000000000 [ 1196.359172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1196.359185] R13: 00007ffc1427ed2f R14: 00007f0ba6a75300 R15: 0000000000022000 [ 1196.359224] 08:35:33 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:43 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:43 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0505405, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:35:43 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x71b941, 0x0) close(r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r3, 0xffffffffffffffff, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000200)={0xdef4, {{0xa, 0x4e24, 0x9, @private2, 0x7}}}, 0x88) dup3(r2, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f00000000c0)=0xc) 08:35:43 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, '\x00', 0x6}, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:35:43 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_IE={0x1b, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}, @challenge={0x10, 0x1, 0x25}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x48}}, 0x0) 08:35:43 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:35:43 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:43 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:35:43 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2={0xff, 0x2, '\x00', 0xc}, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:35:43 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:35:43 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_IE={0x1b, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}, @challenge={0x10, 0x1, 0x25}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0) 08:35:43 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0505405, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc04c040}, 0x1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r1, 0x4b3ded5fe36fe2d1, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7656}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140), 0x6) 08:35:43 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:35:43 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:35:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:35:56 executing program 3: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:35:56 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x80000}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r1, r2, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x2, 0x80, 0xfe, 0x2, 0x0, 0x7d, 0x305, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1200, 0x1, @perf_config_ext={0x6, 0x7}, 0x10000, 0x3, 0x8, 0x5, 0x9, 0x1, 0x8001, 0x0, 0xfff, 0x0, 0x7ff}, 0x0, 0x10, r2, 0x18) write$bt_hci(r0, &(0x7f0000000180)={0x1, @write_local_name={{0xc13, 0xf8}, {"0a8bb52e5c97dd655b92c82a1548187d34fd82a0b59f314a0e66b0adaa21a093be4e003f31b5f5b59d1a0bc8d2fa65ece40b9f13cb85e0237b328bf3f144bf764c3a775807686a94e6230fbfdbccdc8ef0ff4e41adeb497e41b53af27aa62f32279ec5f4e51ef05ebe175ce32288cf7191c5d5dfbc680b1fe383cde3020f38ec793e4acca744cd4ef9f12c78fce918e95fa05dbc8be95c4b9df8d431f7a29801df24dc34c9fbc343e397305409617a561f6547e35d526d7b2f84b378b73d20eb971793ca28d1b16ea51d49b043928037f72a636d0febb7858ed865c478854e397df94c19a9080c17ebc8b2433e3337ac7770b44f0ccc4c4d"}}}, 0xfc) 08:35:56 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:56 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_IE={0x1b, 0x2a, [@link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @broadcast}}, @challenge={0x10, 0x1, 0x25}]}]]}, 0x38}}, 0x0) 08:35:56 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:35:56 executing program 1: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0505405, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:56 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:56 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:35:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) (fail_nth: 1) socket$inet6_udp(0xa, 0x2, 0x0) 08:35:56 executing program 3: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:35:56 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:35:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:35:56 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:35:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1040040, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@fscache}, {@version_L}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@fscache}, {@msize={'msize', 0x3d, 0xaa2}}, {@access_user}, {@privport}], [{@seclabel}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@pcr={'pcr', 0x3d, 0x15}}]}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000180)="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") [ 1220.295591] FAULT_INJECTION: forcing a failure. [ 1220.295591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1220.297613] CPU: 0 UID: 0 PID: 9751 Comm: syz-executor.1 Not tainted 6.17.0-rc1-next-20250815 #1 PREEMPT(voluntary) [ 1220.297642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1220.297655] Call Trace: [ 1220.297663] [ 1220.297673] dump_stack_lvl+0xfa/0x120 [ 1220.297710] should_fail_ex+0x4d7/0x5e0 [ 1220.297761] _copy_to_user+0x32/0xd0 [ 1220.297795] simple_read_from_buffer+0xe0/0x180 [ 1220.297837] proc_fail_nth_read+0x18a/0x240 [ 1220.297879] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1220.297920] ? security_file_permission+0x22/0x90 [ 1220.297955] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1220.297994] vfs_read+0x1eb/0xc70 [ 1220.298048] ? __pfx_vfs_read+0x10/0x10 [ 1220.298088] ? lock_release+0xc8/0x290 [ 1220.298129] ? __fget_files+0x20d/0x3b0 [ 1220.298197] ksys_read+0x121/0x240 [ 1220.298230] ? __pfx_ksys_read+0x10/0x10 [ 1220.298296] do_syscall_64+0xbf/0x360 [ 1220.298330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.298353] RIP: 0033:0x7f83c5ba769c [ 1220.298372] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1220.298392] RSP: 002b:00007f83c316a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1220.298413] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f83c5ba769c [ 1220.298427] RDX: 000000000000000f RSI: 00007f83c316a1e0 RDI: 0000000000000006 [ 1220.298440] RBP: 00007f83c316a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1220.298453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1220.298465] R13: 00007ffc8368949f R14: 00007f83c316a300 R15: 0000000000022000 [ 1220.298539] 08:36:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:36:06 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000180)={{r2}, "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"}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) dup3(r3, r4, 0x0) fstat(r2, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r4, 0x0, r5) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000140), 0x6) 08:36:06 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:36:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:36:06 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:36:06 executing program 3: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:36:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 1) 08:36:06 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0145401, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) [ 1230.037896] FAULT_INJECTION: forcing a failure. [ 1230.037896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1230.038864] CPU: 0 UID: 0 PID: 9768 Comm: syz-executor.6 Not tainted 6.17.0-rc1-next-20250815 #1 PREEMPT(voluntary) [ 1230.038880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1230.038887] Call Trace: [ 1230.038892] [ 1230.038897] dump_stack_lvl+0xfa/0x120 [ 1230.038916] should_fail_ex+0x4d7/0x5e0 [ 1230.038940] _copy_from_user+0x30/0xd0 [ 1230.038961] copy_msghdr_from_user+0x88/0x150 [ 1230.038976] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1230.038991] ? __pfx_perf_trace_lock+0x10/0x10 [ 1230.039009] ? lock_acquire+0x15e/0x2f0 [ 1230.039025] ___sys_sendmsg+0xdc/0x1b0 [ 1230.039038] ? __pfx____sys_sendmsg+0x10/0x10 [ 1230.039049] ? perf_trace_lock+0xb5/0x5d0 [ 1230.039065] ? __pfx_perf_trace_lock+0x10/0x10 [ 1230.039076] ? proc_fail_nth_write+0x97/0x220 [ 1230.039098] ? lock_acquire+0x15e/0x2f0 [ 1230.039109] ? __fget_files+0x34/0x3b0 [ 1230.039125] ? find_held_lock+0x2b/0x80 [ 1230.039141] ? __fget_files+0x203/0x3b0 [ 1230.039156] ? lock_release+0xc8/0x290 [ 1230.039171] ? __fget_files+0x20d/0x3b0 [ 1230.039194] __sys_sendmsg+0x150/0x200 [ 1230.039206] ? __pfx___sys_sendmsg+0x10/0x10 [ 1230.039221] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1230.039240] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1230.039259] ? ksys_write+0x1a3/0x240 [ 1230.039276] ? __pfx_ksys_write+0x10/0x10 [ 1230.039300] do_syscall_64+0xbf/0x360 [ 1230.039315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.039328] RIP: 0033:0x7f6cc5283b19 [ 1230.039338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1230.039349] RSP: 002b:00007f6cc27f9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1230.039360] RAX: ffffffffffffffda RBX: 00007f6cc5396f60 RCX: 00007f6cc5283b19 [ 1230.039368] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1230.039375] RBP: 00007f6cc27f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1230.039382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1230.039388] R13: 00007fff038308af R14: 00007f6cc27f9300 R15: 0000000000022000 [ 1230.039408] 08:36:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 2) [ 1230.140505] FAULT_INJECTION: forcing a failure. [ 1230.140505] name failslab, interval 1, probability 0, space 0, times 0 [ 1230.141419] CPU: 0 UID: 0 PID: 9785 Comm: syz-executor.6 Not tainted 6.17.0-rc1-next-20250815 #1 PREEMPT(voluntary) [ 1230.141435] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1230.141442] Call Trace: [ 1230.141447] [ 1230.141451] dump_stack_lvl+0xfa/0x120 [ 1230.141474] should_fail_ex+0x4d7/0x5e0 [ 1230.141498] should_failslab+0xc2/0x120 [ 1230.141518] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 1230.141535] ? __alloc_skb+0x2ab/0x370 [ 1230.141552] __alloc_skb+0x2ab/0x370 [ 1230.141564] ? __pfx___alloc_skb+0x10/0x10 [ 1230.141578] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1230.141597] netlink_alloc_large_skb+0x69/0x150 [ 1230.141612] netlink_sendmsg+0x676/0xd80 [ 1230.141628] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1230.141651] ____sys_sendmsg+0xa67/0xc20 [ 1230.141668] ? copy_msghdr_from_user+0xfb/0x150 [ 1230.141681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1230.141704] ? lock_acquire+0x15e/0x2f0 [ 1230.141720] ___sys_sendmsg+0x10f/0x1b0 [ 1230.141733] ? __pfx____sys_sendmsg+0x10/0x10 [ 1230.141744] ? perf_trace_lock+0xb5/0x5d0 [ 1230.141760] ? __pfx_perf_trace_lock+0x10/0x10 [ 1230.141771] ? proc_fail_nth_write+0x97/0x220 [ 1230.141792] ? lock_acquire+0x15e/0x2f0 [ 1230.141804] ? __fget_files+0x34/0x3b0 [ 1230.141820] ? find_held_lock+0x2b/0x80 [ 1230.141835] ? __fget_files+0x203/0x3b0 [ 1230.141850] ? lock_release+0xc8/0x290 [ 1230.141865] ? __fget_files+0x20d/0x3b0 [ 1230.141888] __sys_sendmsg+0x150/0x200 [ 1230.141900] ? __pfx___sys_sendmsg+0x10/0x10 [ 1230.141920] ? __pfx_ksys_write+0x10/0x10 [ 1230.141945] do_syscall_64+0xbf/0x360 [ 1230.141960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.141973] RIP: 0033:0x7f6cc5283b19 08:36:06 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) [ 1230.141982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1230.141994] RSP: 002b:00007f6cc27f9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1230.142005] RAX: ffffffffffffffda RBX: 00007f6cc5396f60 RCX: 00007f6cc5283b19 [ 1230.142013] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1230.142020] RBP: 00007f6cc27f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1230.142026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1230.142033] R13: 00007fff038308af R14: 00007f6cc27f9300 R15: 0000000000022000 [ 1230.142053] 08:36:06 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:36:06 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:36:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:36:07 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:36:07 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r0, &(0x7f0000000140), 0x6) pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="0b9441a50aea6b6aa964b6d8db7ea0eb92a0d5245a8c6f33f64261f33e892a0081ffcb92bf43303a3aae5ab3625673f0303c8329f3a03948bb556587466c60325844f6f91a486ccfea895e73fc6d3292dade6c1c7ac1283b7c5d7e0ab8610f6e1fe695ce52c1d9d0f99365027c6c00a9f2d7826abbae4b70bc250ca80fb522c2b6d89f4912ca4508072bdd1b95470376134d260fdb8c436fcfd6fd1d851b97fadf6d80", 0xa3}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000240)="126ab57faf0bd068dfa59152658ffec01ec1e18b9d5bd025918c9dc5ff8b386ca933c2a9c13209c675c518b64cbdbb8859367c3edb2001c3a0ee5567ae2df8d7b7f3361456bd554365ea5b22600b5dc93f0fac5ec0b31561a34ae9528be68321db140c1b443f5b04c1c56cd4847f9c57d91aa6730ecbc17cbe197a28b0e2b5599d2500be89c42ace7c5e55f73d3aa9be97a997253aa8cac2716c0f21fab55b84e33418f1c5b00f03b3d13d5329b600636d95", 0xb2}, {&(0x7f0000000300)="cee7fdf0db1796b349b6f41f48e318df17e4723e197835f507b95d166b1970d62bc20decbede5bc2ca58c45d2f68f251fea0965562fdfc119e1071b43801de464371204c0ca8616701e3a6fe53bbcb1b23a1331cd6d0ad009aa3baada01a277838047f8b75919773ca92758deb310e1e59a46cc60051d07d5f6264d13a15e13206abbc85d3fee848e510a93183de669847c420ba698c3c0fde117844a4fb2dc157502bb674250bac21b98a7bc87d8ad79ee1f82726fb12058fcce9f1511b11", 0xbf}, {&(0x7f0000001400)="6bd3bd4f4a656621d366a5e3e79469f1f08cdfb2ae59c3c0c0e8fede09398f80b71857ecec0f60c0fd5806a8efdbb50cf4d44980b49806c12714175f6c6d89b759684548262389ffda1bb7a0ac4c934f982d78e4a70cf52cf804953e507515eecaecbe5fc84a1ff30e2904ccd5547419d1c42f43ba13e05e0c17a79a4f281d5ee69f7cf406cbbef7a9351e5d4c872404fe65431a2b2197e7", 0x98}, {&(0x7f00000014c0)="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", 0x1000}], 0x6, 0x3, 0xc1, 0x11) 08:36:07 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, 0x0) 08:36:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x3, 0x4}, 0x6) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0x200, 0x40000) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @le_set_scan_rsp_data={{0x2009, 0x20}, {0x4, "1b03c8c9adb2e718f95a35269cc5e7764a4505d3e50b8de5c4e15756a4da7d"}}}, 0x24) bind$bt_hci(r2, &(0x7f0000000140), 0xfffffffffffffe7b) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x200200, 0x0) write$bt_hci(r3, &(0x7f0000000080)={0x1, @write_le_host_supported={{0xc6d, 0x2}, {0x30, 0x4}}}, 0x6) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r4, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:36:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 3) 08:36:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000000)="14dc435eb6cf56b65245109a5ae3f62b0fb6930ad0f61fe010d983dbaf21578677a345d7f3e63ae2c9799e8dd3165da2995e64f49010f4a814e36a35de62d7e7bd9314ae107721b743d63ecf4f86dcc204ffedf096f0cbdcf9767b11db381cd7") r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:36:17 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x4, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:36:17 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) 08:36:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x7, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:36:17 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, 0x0) 08:36:17 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:36:17 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:36:17 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x5, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:36:17 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(0x0, 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:36:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x79, 0x0, 0x0, 0x10, 0x0, 0xffff, 0x18188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7ff, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:36:17 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x4}, 0x6) 08:36:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:36:17 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, 0x0) 08:36:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 4) 08:36:27 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 5) 08:36:27 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000040)={{}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:36:27 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x6, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:36:27 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(0x0, 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:36:27 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:36:27 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x81, 0xac, 0x3f, 0x8c, 0x0, 0xd577, 0x10, 0x1c, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x26ff, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x2080, 0x2, 0x0, 0x7, 0x3, 0x0, 0xf73f, 0x0, 0x1ff, 0x0, 0x5}, 0x0, 0x9, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:36:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:36:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x4002, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x6000000000, 0x80}) dup3(r0, r1, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140), 0x6) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000a80)={0x0, 0x5, 0x5, 0x1}) dup3(r4, r5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000000c0)='\x00') preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0xf16, 0x7fffffff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:36:27 executing program 7: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0145401, &(0x7f0000000040)={{}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:36:27 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 6) 08:36:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) [ 1251.118257] FAULT_INJECTION: forcing a failure. [ 1251.118257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1251.119399] CPU: 1 UID: 0 PID: 9873 Comm: syz-executor.6 Not tainted 6.17.0-rc1-next-20250815 #1 PREEMPT(voluntary) [ 1251.119421] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1251.119429] Call Trace: [ 1251.119434] [ 1251.119439] dump_stack_lvl+0xfa/0x120 [ 1251.119460] should_fail_ex+0x4d7/0x5e0 [ 1251.119489] _copy_from_iter+0x1dc/0x1660 [ 1251.119510] ? lock_acquire+0x15e/0x2f0 [ 1251.119524] ? __virt_addr_valid+0x1c6/0x5d0 [ 1251.119543] ? find_held_lock+0x2b/0x80 [ 1251.119561] ? __pfx__copy_from_iter+0x10/0x10 [ 1251.119578] ? lock_release+0xc8/0x290 [ 1251.119593] ? __virt_addr_valid+0x100/0x5d0 [ 1251.119611] ? __check_object_size+0x57b/0x880 [ 1251.119632] netlink_sendmsg+0x809/0xd80 [ 1251.119652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1251.119674] ____sys_sendmsg+0xa67/0xc20 [ 1251.119693] ? copy_msghdr_from_user+0xfb/0x150 [ 1251.119706] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1251.119729] ? lock_acquire+0x15e/0x2f0 [ 1251.119743] ___sys_sendmsg+0x10f/0x1b0 [ 1251.119757] ? __pfx____sys_sendmsg+0x10/0x10 [ 1251.119768] ? perf_trace_lock+0xb5/0x5d0 [ 1251.119784] ? __pfx_perf_trace_lock+0x10/0x10 [ 1251.119795] ? proc_fail_nth_write+0x97/0x220 [ 1251.119817] ? lock_acquire+0x15e/0x2f0 [ 1251.119828] ? __fget_files+0x34/0x3b0 [ 1251.119845] ? find_held_lock+0x2b/0x80 [ 1251.119860] ? __fget_files+0x203/0x3b0 [ 1251.119875] ? lock_release+0xc8/0x290 [ 1251.119890] ? __fget_files+0x20d/0x3b0 [ 1251.119913] __sys_sendmsg+0x150/0x200 [ 1251.119925] ? __pfx___sys_sendmsg+0x10/0x10 [ 1251.119945] ? __pfx_ksys_write+0x10/0x10 [ 1251.119970] do_syscall_64+0xbf/0x360 [ 1251.119986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.120000] RIP: 0033:0x7f6cc5283b19 [ 1251.120009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1251.120020] RSP: 002b:00007f6cc27f9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1251.120032] RAX: ffffffffffffffda RBX: 00007f6cc5396f60 RCX: 00007f6cc5283b19 [ 1251.120040] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1251.120048] RBP: 00007f6cc27f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1251.120055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1251.120062] R13: 00007fff038308af R14: 00007f6cc27f9300 R15: 0000000000022000 [ 1251.120082] 08:36:27 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x2b, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:36:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x183) r2 = dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000100)={0x0, 0x1, 0x1d}, 0x18) renameat(r2, 0x0, r3, 0x0) r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40220, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x9}, 0x0, 0x0, 0x40000000, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="00000000090000040000000000000000"]) bind$bt_hci(r6, &(0x7f0000000140), 0xffffffffffffffe8) r7 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r5, r7, 0x0) accept$inet(r7, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10) creat(&(0x7f0000000000)='./file0\x00', 0x42) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:36:27 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:36:28 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(0x0, 0x9a, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:36:28 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x2c, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:36:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:36:28 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$setlease(r0, 0x400, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) bind$bt_hci(r1, &(0x7f0000000000), 0x6) 08:36:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 7) [ 1251.380110] FAULT_INJECTION: forcing a failure. [ 1251.380110] name failslab, interval 1, probability 0, space 0, times 0 [ 1251.381198] CPU: 1 UID: 0 PID: 9895 Comm: syz-executor.6 Not tainted 6.17.0-rc1-next-20250815 #1 PREEMPT(voluntary) [ 1251.381215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1251.381223] Call Trace: [ 1251.381228] [ 1251.381233] dump_stack_lvl+0xfa/0x120 [ 1251.381255] should_fail_ex+0x4d7/0x5e0 [ 1251.381279] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1251.381297] should_failslab+0xc2/0x120 [ 1251.381319] __kmalloc_noprof+0xb4/0x4b0 [ 1251.381337] ? avc_has_perm_noaudit+0x150/0x3d0 [ 1251.381358] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1251.381379] genl_family_rcv_msg_doit+0xab/0x2f0 [ 1251.381395] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1251.381414] ? cap_capable+0xdb/0x3b0 [ 1251.381431] ? security_capable+0x2f/0x90 [ 1251.381452] ? ns_capable+0xe2/0x120 [ 1251.381476] genl_rcv_msg+0x532/0x7e0 [ 1251.381495] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1251.381510] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1251.381522] ? __pfx_nl80211_start_ap+0x10/0x10 [ 1251.381534] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1251.381559] netlink_rcv_skb+0x147/0x430 [ 1251.381573] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1251.381589] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1251.381612] ? netlink_deliver_tap+0x1ae/0xce0 [ 1251.381624] ? selinux_netlink_send+0x507/0x880 [ 1251.381641] ? is_vmalloc_addr+0x86/0xa0 [ 1251.381662] genl_rcv+0x28/0x40 [ 1251.381674] netlink_unicast+0x5a7/0x870 [ 1251.381691] ? __pfx_netlink_unicast+0x10/0x10 [ 1251.381713] netlink_sendmsg+0x8ac/0xd80 [ 1251.381731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1251.381754] ____sys_sendmsg+0xa67/0xc20 [ 1251.381773] ? copy_msghdr_from_user+0xfb/0x150 [ 1251.381786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1251.381809] ? lock_acquire+0x15e/0x2f0 [ 1251.381826] ___sys_sendmsg+0x10f/0x1b0 [ 1251.381839] ? __pfx____sys_sendmsg+0x10/0x10 [ 1251.381851] ? perf_trace_lock+0xb5/0x5d0 [ 1251.381868] ? __pfx_perf_trace_lock+0x10/0x10 [ 1251.381879] ? proc_fail_nth_write+0x97/0x220 [ 1251.381902] ? lock_acquire+0x15e/0x2f0 [ 1251.381913] ? __fget_files+0x34/0x3b0 [ 1251.381930] ? find_held_lock+0x2b/0x80 [ 1251.381946] ? __fget_files+0x203/0x3b0 [ 1251.381962] ? lock_release+0xc8/0x290 [ 1251.381977] ? __fget_files+0x20d/0x3b0 [ 1251.382000] __sys_sendmsg+0x150/0x200 [ 1251.382013] ? __pfx___sys_sendmsg+0x10/0x10 [ 1251.382033] ? __pfx_ksys_write+0x10/0x10 [ 1251.382060] do_syscall_64+0xbf/0x360 [ 1251.382076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.382089] RIP: 0033:0x7f6cc5283b19 [ 1251.382099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1251.382110] RSP: 002b:00007f6cc27f9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1251.382122] RAX: ffffffffffffffda RBX: 00007f6cc5396f60 RCX: 00007f6cc5283b19 [ 1251.382131] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1251.382138] RBP: 00007f6cc27f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1251.382146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1251.382153] R13: 00007fff038308af R14: 00007f6cc27f9300 R15: 0000000000022000 [ 1251.382173] 08:36:39 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x4) 08:36:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 8) 08:36:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x100, 0x182) tee(0xffffffffffffffff, r2, 0x10000, 0xb) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140), 0x6) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r5 = dup3(r3, r4, 0x0) write$bt_hci(r5, &(0x7f00000000c0)={0x1, @switch_role={{0x80b, 0x7}, {@none, 0x5}}}, 0xb) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000001060000003319168002325ec43eb662"], 0x14}}, 0x0) bind$unix(r5, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) fspick(r4, &(0x7f0000000100)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r5, &(0x7f0000000180), 0x0, 0x4000) 08:36:39 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x33, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:36:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:36:39 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:36:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x217, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:36:39 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1040040, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@fscache}, {@version_L}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@fscache}, {@msize={'msize', 0x3d, 0xaa2}}, {@access_user}, {@privport}], [{@seclabel}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@pcr={'pcr', 0x3d, 0x15}}]}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000180)="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") 08:36:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:36:39 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:36:39 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x12198, 0x6178, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:36:39 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x3c, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:36:39 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:36:49 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x60, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:36:49 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:36:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)=0x63) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0xad, 0xaac14440dfb539cb, 0x0, "af9c10d8a7f89bbe4457fc91dd4131d4", "1449f3be3f172ff27f4c36a37156a031c09db8982694603dda124d821036868e2b6e4fa483428ea097296b0ebfb44a34cbb819814946f8e7aa615e77ca972a87f50b3c18004f6e8b1721d50908b4bce2f36ffb93b37ec2b4cfab09981b21d7bf9e6ed189b124790603bdd0c217461a12feb146f441ac4fc53c6e50ca85b43dc5363ea2a28ccf506c857e5f37df5ebe513bcf0da0380ce65f"}, 0xad, 0x3) socket$inet6_udp(0xa, 0x2, 0x0) 08:36:49 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:36:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 9) 08:36:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:36:49 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1040040, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@fscache}, {@version_L}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@fscache}, {@msize={'msize', 0x3d, 0xaa2}}, {@access_user}, {@privport}], [{@seclabel}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@pcr={'pcr', 0x3d, 0x15}}]}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000180)="95861448c12bd9b92d47fa3404012656aed8e6fe40b86131793e93bd7ef4664b7892a1b612aeec099f53b4c05fe043a15d780b15f42c82615e1f8ef2359ede8c5d709bb79b4d2ee677b3de541f5f35c8db9c330b0aa286b317fa50193fcf23ad57948bca9dd35960d094e2e0f06223ce9ebafeb2bbdab05588dfcbad89847f4bd971a12d74efd02da2c2b123e677f5a3a5d90bfa5f299b81a13734458055eddfb97c548062a333c8f7d874c34d89a700b246c853658456b12e2c5f01be499204d7d3bf9361c15c00c4e237603a48106439367255fa4772143253f74cf5ce3b9886b13fd4c7e8a46af07237f1c41b13bd8c9f1f31c78039607fee48fa") 08:36:49 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x116) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) memfd_secret(0x80000) bind$bt_hci(r0, &(0x7f0000000140), 0x6) [ 1272.579441] FAULT_INJECTION: forcing a failure. [ 1272.579441] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.580426] CPU: 1 UID: 0 PID: 9944 Comm: syz-executor.6 Not tainted 6.17.0-rc1-next-20250815 #1 PREEMPT(voluntary) [ 1272.580442] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1272.580449] Call Trace: [ 1272.580454] [ 1272.580458] dump_stack_lvl+0xfa/0x120 [ 1272.580482] should_fail_ex+0x4d7/0x5e0 [ 1272.580507] should_failslab+0xc2/0x120 [ 1272.580527] kmem_cache_alloc_node_noprof+0x71/0x3e0 [ 1272.580545] ? __alloc_skb+0x2ab/0x370 [ 1272.580561] __alloc_skb+0x2ab/0x370 [ 1272.580573] ? __pfx___alloc_skb+0x10/0x10 [ 1272.580585] ? genl_rcv_msg+0x532/0x7e0 [ 1272.580608] netlink_ack+0x167/0xbf0 [ 1272.580629] netlink_rcv_skb+0x344/0x430 [ 1272.580643] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1272.580658] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1272.580682] ? netlink_deliver_tap+0x1ae/0xce0 [ 1272.580692] ? selinux_netlink_send+0x507/0x880 [ 1272.580710] ? is_vmalloc_addr+0x86/0xa0 [ 1272.580730] genl_rcv+0x28/0x40 [ 1272.580742] netlink_unicast+0x5a7/0x870 [ 1272.580759] ? __pfx_netlink_unicast+0x10/0x10 [ 1272.580781] netlink_sendmsg+0x8ac/0xd80 [ 1272.580798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1272.580821] ____sys_sendmsg+0xa67/0xc20 [ 1272.580842] ? copy_msghdr_from_user+0xfb/0x150 [ 1272.580856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1272.580879] ? lock_acquire+0x15e/0x2f0 [ 1272.580895] ___sys_sendmsg+0x10f/0x1b0 [ 1272.580909] ? __pfx____sys_sendmsg+0x10/0x10 [ 1272.580920] ? perf_trace_lock+0xb5/0x5d0 [ 1272.580936] ? __pfx_perf_trace_lock+0x10/0x10 [ 1272.580947] ? proc_fail_nth_write+0x97/0x220 [ 1272.580969] ? lock_acquire+0x15e/0x2f0 [ 1272.580980] ? __fget_files+0x34/0x3b0 [ 1272.580996] ? find_held_lock+0x2b/0x80 [ 1272.581011] ? __fget_files+0x203/0x3b0 [ 1272.581026] ? lock_release+0xc8/0x290 [ 1272.581041] ? __fget_files+0x20d/0x3b0 [ 1272.581065] __sys_sendmsg+0x150/0x200 [ 1272.581077] ? __pfx___sys_sendmsg+0x10/0x10 [ 1272.581097] ? __pfx_ksys_write+0x10/0x10 [ 1272.581122] do_syscall_64+0xbf/0x360 [ 1272.581137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.581151] RIP: 0033:0x7f6cc5283b19 [ 1272.581160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1272.581171] RSP: 002b:00007f6cc27f9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1272.581182] RAX: ffffffffffffffda RBX: 00007f6cc5396f60 RCX: 00007f6cc5283b19 [ 1272.581190] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1272.581197] RBP: 00007f6cc27f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1272.581203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1272.581210] R13: 00007fff038308af R14: 00007f6cc27f9300 R15: 0000000000022000 [ 1272.581230] 08:36:49 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) getsockname(r0, &(0x7f00000000c0)=@ieee802154, &(0x7f0000000000)=0x80) 08:36:49 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1040040, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@fscache}, {@version_L}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@fscache}, {@msize={'msize', 0x3d, 0xaa2}}, {@access_user}, {@privport}], [{@seclabel}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@pcr={'pcr', 0x3d, 0x15}}]}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e4, &(0x7f0000000180)="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") 08:36:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 10) 08:36:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:36:49 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x68, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:36:49 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x2, 0x0, 'id1\x00', 'timer1\x00'}) 08:36:49 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x40c00) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:36:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000080)="a9fa8c1f749aa8b3bf6828ad0c636f4308ce2b7b52f9e9835d372a77cc10f8d59860c1a81612e35d30e81711182dcc0c2967673ac59b2aca1ac58a693a16f74210f5ae93a23fe34511cd2a6ca68080d0fa8df732a5939b44bfffb5a1e6660c33ec5d0cb83740f7568bf57042069a50bc07f84b84f1ec2b1003c529") bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r2, r3, 0x0) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) 08:36:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 11) 08:36:49 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1040040, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@fscache}, {@version_L}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@fscache}, {@msize={'msize', 0x3d, 0xaa2}}, {@access_user}, {@privport}], [{@seclabel}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@pcr={'pcr', 0x3d, 0x15}}]}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 08:36:49 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:36:49 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:37:00 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1040040, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@fscache}, {@version_L}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@fscache}, {@msize={'msize', 0x3d, 0xaa2}}, {@access_user}, {@privport}], [{@seclabel}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@pcr={'pcr', 0x3d, 0x15}}]}}) 08:37:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x600, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:37:00 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x8, 0x0, 'id1\x00', 'timer1\x00'}) 08:37:00 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r0, r2, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02000000", @ANYRES16=0x0, @ANYBLOB="0004df25430000000c0058007a000000000000000c00580073000000000000000c0058002900000000000000000c00580066000000000000000c00580037000000000000000c0058002f00"/98], 0x68}}, 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000300)=0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x3a081, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x2b, 0x80, 0x9, 0xff, 0x0, 0x3ff, 0x200, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffff2d, 0x2, @perf_config_ext={0x2, 0x1}, 0x2023, 0x5, 0xeb, 0x3, 0x4000000000004, 0x3, 0x5, 0x0, 0x1, 0x0, 0x1}, r5, 0x9, r6, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000240)={0x2, 'syzkaller1\x00', {0x729}, 0x506}) r7 = fcntl$dupfd(r4, 0x406, r4) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000140), 0x6) r9 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r10 = dup3(r8, r9, 0x0) sendmsg$IPSET_CMD_TEST(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) ioctl$sock_bt_hci(r10, 0x400448df, &(0x7f0000000400)="2c39ae26875388a78bcd615efc550bd2d7d8f42c46bc7e907787345ae7b8c061a7d7064957421cc76be5a1280168a23030754b084e9eb63bbc69dc759098c15dca9a37ee186e6f8320dc032c95394a0d5d2458ee439719348f7107bd3314f699b59129f228877d90895c0b5d51648ed42c9e5457424909c7e1a42659bbf19654959dfaa5256ca3dde6e1e5debeb0a64f64bf1720438627b5244a2f57ddf5b406788e660dbf1f15c70a63432e5d098a5e20b90e0d7a5a0e9a2cc6cd95315c079c92723ee9adfc680f4080e70061c76c3317673a0e1b3707") bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0x0, 0x2}, 0x5) 08:37:00 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x3, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:37:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 12) 08:37:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r3, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r5, 0xffffffffffffffff, 0x0) dup3(r4, r5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r6, 0xffffffffffffffff, 0x0) dup3(r5, 0xffffffffffffffff, 0x80000) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:37:00 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:37:00 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x80000, 0x0, 'id1\x00', 'timer1\x00'}) 08:37:00 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x4, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:37:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:37:00 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) 08:37:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 13) 08:37:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) recvfrom(r0, &(0x7f0000000000)=""/24, 0x18, 0x40, &(0x7f0000000080)=@ll={0x11, 0x6, r3, 0x1, 0x6, 0x6, @multicast}, 0x80) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) dup3(r2, r4, 0x0) close(r4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:37:00 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) [ 1283.940713] FAULT_INJECTION: forcing a failure. [ 1283.940713] name fail_usercopy, interval 1, probability 0, space 0, times 0 08:37:00 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x5, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) [ 1283.942481] CPU: 0 UID: 0 PID: 10030 Comm: syz-executor.6 Not tainted 6.17.0-rc1-next-20250815 #1 PREEMPT(voluntary) [ 1283.942510] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1283.942522] Call Trace: [ 1283.942530] [ 1283.942539] dump_stack_lvl+0xfa/0x120 [ 1283.942569] should_fail_ex+0x4d7/0x5e0 [ 1283.942610] _copy_to_user+0x32/0xd0 [ 1283.942635] simple_read_from_buffer+0xe0/0x180 [ 1283.942667] proc_fail_nth_read+0x18a/0x240 [ 1283.942701] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1283.942735] ? security_file_permission+0x22/0x90 [ 1283.942765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1283.942797] vfs_read+0x1eb/0xc70 [ 1283.942837] ? __pfx_vfs_read+0x10/0x10 [ 1283.942870] ? lock_release+0xc8/0x290 [ 1283.942899] ? __fget_files+0x20d/0x3b0 [ 1283.942944] ksys_read+0x121/0x240 [ 1283.942973] ? __pfx_ksys_read+0x10/0x10 [ 1283.943018] do_syscall_64+0xbf/0x360 [ 1283.943045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.943068] RIP: 0033:0x7f6cc523669c [ 1283.943085] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1283.943105] RSP: 002b:00007f6cc27f9170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1283.943125] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 00007f6cc523669c [ 1283.943140] RDX: 000000000000000f RSI: 00007f6cc27f91e0 RDI: 0000000000000004 [ 1283.943153] RBP: 00007f6cc27f91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1283.943178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 08:37:00 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x1000000, 0x0, 'id1\x00', 'timer1\x00'}) [ 1283.943190] R13: 00007fff038308af R14: 00007f6cc27f9300 R15: 0000000000022000 [ 1283.943227] 08:37:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:37:09 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) 08:37:09 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:37:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:37:09 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x2000000, 0x0, 'id1\x00', 'timer1\x00'}) 08:37:09 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:37:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:37:09 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x6, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:37:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)="163222baef48e047e528f2814fe9b4097328ed623d55d1d6c9d331f47da7c10f5e457705a1014093989fe7a74c5af7fbd2f0220dc6b85960afb68e10a966304638f35c9159e5a1cfa839ec8ef894") r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) r2 = accept(r0, &(0x7f0000000080)=@sco={0x1f, @fixed}, &(0x7f0000000100)=0x80) sendfile(r2, r0, 0x0, 0xbaa) 08:37:10 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x2b, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:37:10 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:37:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:37:20 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:37:20 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x20, 0x40000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:37:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:37:20 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r3, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) ioctl$FITHAW(r2, 0xc0045878) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r5, 0xffffffffffffffff, 0x0) dup3(r4, r5, 0x0) sendmsg$inet(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="221005de2e407a2ec2080e94a8760c376401c4a521bc35101d95d0c2708ed178e4309e307f5c98f588b398931e39719b336266f878b31a2e0e6ad4bfe9805d5b4b19d9db537586f403e13e5e442fd30f2071bf0ced82f860ed3c382e16c9c57c4d44b15d59480cf5344ae32302057e21f407638b040afd5435b178e5ae2f17dc9dfded07aab4d95b81513675aef83840aa101669f2b73635827b8a1c4342b664315df3588109460fe557bb8e4cae0fe6ddacfcf30ac1513ec3c24ef4f3e6848e713e23700364ca716d500e0699f84d972c34f892fcf46fa52fb93bfa5f8b1913be6641b4", 0xe4}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000000180)="a2f6900f0b2a4a320212dbc5dbdda98fa26c22e2e214d99812ab13c7b2c803c61a0e8304d3609171ae6495b68d55dcf0377d5551bda1fccd73c8011d1455f3133497fd82586bebce970797077e", 0x4d}], 0x3, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}, 0x1890) 08:37:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x1702, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:37:20 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x2c, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:37:20 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:37:20 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) 08:37:20 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x2, 'id1\x00', 'timer1\x00'}) 08:37:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf000, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:37:20 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x33, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:37:30 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 08:37:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:37:30 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x8, 'id1\x00', 'timer1\x00'}) 08:37:30 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x3c, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:37:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:37:30 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) 08:37:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x30000, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:37:30 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8, 0x9, 0xdd, 0x7f, 0x0, 0x8159, 0x200, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x20, 0x68, 0x9, 0x7, 0x6, 0x3b4b, 0x9c8c, 0x0, 0x925, 0x0, 0x3}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r1, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) read(r0, &(0x7f0000000200)=""/4096, 0x1000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x26000, 0x0) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0x1}, 0x6) 08:37:30 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x60, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:37:30 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) 08:37:30 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 08:37:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x80000, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:37:31 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x80000, 'id1\x00', 'timer1\x00'}) 08:37:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:37:31 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) r5 = dup3(r2, r3, 0x80000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000000)={0x3, 0x2, 'a++', 0xc3, 0x40}) dup3(r7, r8, 0x0) dup3(r8, r5, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:37:31 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) 08:37:43 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x1000000, 'id1\x00', 'timer1\x00'}) 08:37:43 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) 08:37:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/eeepc_laptop', 0x40000, 0x1) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={r3, 0x8, 0x200, 0x2}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$bt_hci(r0, &(0x7f0000000080)={0x1, @accept_sync_conn_req={{0x429, 0x15}, {@none, 0x2, 0x20, 0x1f, 0x8, 0x0, 0x3}}}, 0x19) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140), 0x6) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r4, r5, 0x0) getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) 08:37:43 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:37:43 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x68, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:37:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0ffff, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:37:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:37:43 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000180)={0x1, 0x80008000000, 0x1, 0xfffffff7, 0x5, [{0x1, 0x7, 0x5, '\x00', 0x280}, {0x100, 0x82ac, 0x7fffffff, '\x00', 0x102}, {0x6, 0x6, 0x426f, '\x00', 0x300a}, {0x8, 0x800, 0x0, '\x00', 0x80}, {0xc2, 0xfffffffffffffff7, 0x6, '\x00', 0x508}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = getpid() perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x1, 0x0, 0x2, 0xff, 0x0, 0x521a22b0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f00000003c0), 0x9}, 0x4000, 0x7f, 0x10001, 0x4, 0x9, 0x5, 0x7ff, 0x0, 0x8000, 0x0, 0x1}, r1, 0x9, r0, 0xb) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) sendmsg$TIPC_CMD_GET_NETID(r2, 0x0, 0x4040) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x40000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r2) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x64, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x20000880) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r5, 0xffffffffffffffff, 0x0) dup3(r4, r5, 0x0) pread64(r4, &(0x7f0000000340)=""/94, 0x5e, 0x8) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5c, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:37:43 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:37:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0x0, 0x4}, 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r3, 0x0) ioctl$sock_bt_hci(r3, 0x400448cb, &(0x7f0000000000)="ee0628180dc2bec4a889ef031eb796358c4780a1d372dee11e2108e10745ff80a3a9505f771ff16c400a253c8f1d7c3c2a59fcc22111d69c14a7963eed6a7e6c93c844791090932f6e2363f35f4d44da34d4c9f40942d0b0905083cb4101d4acd5376f05b024511ad5f1d7e7e3dc6248860e2ab538ea326be1c9326ae3a44ea1722e34de540e84e30d267a00a4f43c9b116520da9975f846e68950a3fca888f07d028403eec966c08ba83bc0d9deb0c7c6d8cc7d67e54b52248793f661e37905f9a9828b5cdeaef355cafd17") r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r4, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x2, 0x80}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:37:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x1000000, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:37:43 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:37:43 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) (fail_nth: 1) 08:37:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:37:43 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x2000000, 'id1\x00', 'timer1\x00'}) 08:37:43 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) [ 1327.305228] FAULT_INJECTION: forcing a failure. [ 1327.305228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1327.306988] CPU: 1 UID: 0 PID: 10198 Comm: syz-executor.3 Not tainted 6.17.0-rc1-next-20250815 #1 PREEMPT(voluntary) [ 1327.307017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 08:37:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:37:44 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) [ 1327.307029] Call Trace: [ 1327.307037] [ 1327.307046] dump_stack_lvl+0xfa/0x120 [ 1327.307081] should_fail_ex+0x4d7/0x5e0 [ 1327.307122] _copy_to_user+0x32/0xd0 [ 1327.307147] simple_read_from_buffer+0xe0/0x180 [ 1327.307179] proc_fail_nth_read+0x18a/0x240 [ 1327.307213] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1327.307247] ? security_file_permission+0x22/0x90 [ 1327.307277] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1327.307309] vfs_read+0x1eb/0xc70 [ 1327.307348] ? __pfx_vfs_read+0x10/0x10 [ 1327.307381] ? lock_release+0xc8/0x290 [ 1327.307411] ? __fget_files+0x20d/0x3b0 [ 1327.307455] ksys_read+0x121/0x240 [ 1327.307493] ? __pfx_ksys_read+0x10/0x10 [ 1327.307537] do_syscall_64+0xbf/0x360 [ 1327.307565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.307602] RIP: 0033:0x7f0ba27ff69c [ 1327.307619] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1327.307639] RSP: 002b:00007f0b9fdc2170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1327.307660] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f0ba27ff69c [ 1327.307675] RDX: 000000000000000f RSI: 00007f0b9fdc21e0 RDI: 0000000000000005 [ 1327.307687] RBP: 00007f0b9fdc21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1327.307700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.307713] R13: 00007ffd4641be9f R14: 00007f0b9fdc2300 R15: 0000000000022000 [ 1327.307750] 08:37:44 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) r3 = getpgid(0x0) fcntl$lock(r2, 0x25, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r3}) r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x6, 0x80, 0xfa, 0xb4, 0x9, 0x5, 0x0, 0x800, 0x80000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x117, 0x0, @perf_config_ext={0xe7, 0xcb2}, 0x8401, 0xffffffffffffffff, 0xff, 0x6, 0x1, 0x5, 0x0, 0x0, 0x9ce8, 0x0, 0xffff}, r3, 0xc, r0, 0x3) bind$bt_hci(r1, &(0x7f0000000140), 0x6) 08:37:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x7, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:37:44 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x2, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:37:44 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:37:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x401}, 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$inet6_udp(0xa, 0x2, 0x0) 08:37:44 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x2}) 08:37:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3000000, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:37:55 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:37:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x400580, 0x0) write$bt_hci(r1, &(0x7f00000000c0)={0x1, @auth_requested={{0x411, 0x2}, {0xc8}}}, 0x6) bind$bt_hci(r0, &(0x7f0000000140), 0x6) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000100), &(0x7f0000000180)=0x30) 08:37:55 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x8}) 08:37:55 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x3, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:37:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x4000000, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:37:55 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:37:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:37:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x8}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x400000000000000, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)}) ioctl$PIO_UNISCRNMAP(r3, 0x5414, &(0x7f0000000240)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x2200}, {r2}, {0xffffffffffffffff, 0xa030}, {r4, 0x1}, {0xffffffffffffffff, 0x42}, {}], 0x6, &(0x7f0000000400), &(0x7f0000000440)={[0x6]}, 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x3, 0x26a, "47e674", 0x3d, 0x9}) fsetxattr$trusted_overlay_opaque(r5, &(0x7f00000000c0), &(0x7f0000000180), 0x2, 0x3) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) r7 = syz_open_dev$vcsu(&(0x7f00000001c0), 0xabe, 0x480000) bind$bt_hci(r7, &(0x7f0000000200)={0x1f, 0x0, 0x4}, 0x6) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0x3, 0x4}, 0x6) 08:38:08 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x4, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:38:08 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) ioctl$sock_bt_hci(r2, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") bind$bt_hci(r0, &(0x7f0000000140), 0x6) r4 = dup3(r3, r1, 0x7aea08053fe82fff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000200)=0x6, 0x4) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4) write$bt_hci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="01210c02b376245606a6aafe5c4ed27cbdddb7acb596f2ba837b7a9b89b6938117ddc552ea47786d6f895ed5f99e2b91aec709312e207e1a8d624b8a34657427ca0a7dcb5a2b9b550000000000002f13f7abc375"], 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1, @disconn_logical_link={{0x43a, 0x2}, {0x8}}}, 0x6) ppoll(&(0x7f0000000240)=[{r4, 0x5511}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0x8]}, 0x8) fcntl$addseals(r4, 0x409, 0x7) 08:38:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:38:08 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x80000}) 08:38:08 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x2, 0x6) 08:38:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) write$bt_hci(r3, &(0x7f0000000000)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"2352b2b7612f5890"}}}, 0xc) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r4, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000040)=0xee91, 0x4) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x210200, 0x101) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, &(0x7f00000000c0)) 08:38:08 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:38:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x5000000, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:38:08 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x1000000}) 08:38:08 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:38:08 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x5, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:38:08 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x2000000}) 08:38:08 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:38:08 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x301, 0x6) 08:38:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x6000000, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:38:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:38:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000), 0x84800) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r3, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) dup3(r2, r2, 0x80000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r5, 0xffffffffffffffff, 0x0) dup3(r4, r5, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r4, 0x942e, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 08:38:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x7000000, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:38:08 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x6, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:38:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x1f, 0x7, 0x23, @local, @private2, 0x7800, 0x1, 0x64}}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f00000000c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000400)={{{@in=@remote, @in=@local, 0x4e23, 0x3, 0x4e20, 0xada, 0xa, 0x80, 0x40, 0x32, r4, r5}, {0x89, 0x4, 0x1, 0xffffffffffff202d, 0x0, 0x2, 0x9, 0x100000000}, {0x0, 0x101, 0x5}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, {{@in=@private=0xa010102, 0x4d5, 0x32}, 0xf, @in6=@remote, 0x3503, 0x2, 0x0, 0x0, 0x1, 0x4, 0x8000}}, 0xe8) 08:38:18 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:38:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x8000000000000}) 08:38:18 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="bff501e38951f78d1be58702972a0b4e97d77a4ef2d1ae48c8a54f34e90feaa8fd4af04a8b89fea7d72b8dcf22a4689226c5e7225c91b15487a1020c9bc7f64296a9c1fdf3be1682a847bde043d29dc68b5d9460f578e67fbb809a205b0d3363bc0943fcd1daff80a6a6f66f7e23762f12205477e716088e343b2e03296674e44aa9d6a4b5607378dbeb06e94cbc5623c3fbcc") 08:38:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x0) clock_gettime(0x0, &(0x7f00000043c0)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004180)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/99, 0x63}, {&(0x7f0000000180)=""/104, 0x68}, {&(0x7f0000000200)=""/140, 0x8c}, {&(0x7f0000000100)=""/57, 0x39}], 0x4}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000500)=""/108, 0x6c}, {&(0x7f0000000580)=""/85, 0x55}, {&(0x7f0000000600)=""/26, 0x1a}], 0x5, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000000bc0)=[{&(0x7f00000007c0)=""/229, 0xe5}, {&(0x7f00000008c0)=""/133, 0x85}, {&(0x7f0000000980)=""/134, 0x86}, {&(0x7f0000000a80)=""/87, 0x57}, {&(0x7f0000000b00)=""/179, 0xb3}], 0x5, &(0x7f0000000c40)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000000d00)=@abs, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000d80)=""/175, 0xaf}, {&(0x7f0000000e40)=""/125, 0x7d}, {&(0x7f0000000ec0)=""/204, 0xcc}, {&(0x7f0000000fc0)=""/176, 0xb0}], 0x4, &(0x7f00000010c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001100)=@abs, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001180)=""/1, 0x1}], 0x1, &(0x7f0000001200)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f00000012c0)=@abs, 0x6e, &(0x7f0000001580)=[{&(0x7f0000001340)=""/50, 0x32}, {&(0x7f0000001380)=""/220, 0xdc}, {&(0x7f0000001480)=""/82, 0x52}, {&(0x7f0000001500)=""/80, 0x50}], 0x4, &(0x7f00000015c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000001640)=@abs, 0x6e, &(0x7f00000016c0), 0x0, &(0x7f0000001700)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000001800)=@abs, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001880)}], 0x1, &(0x7f0000001900)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f0000001940)=@abs, 0x6e, &(0x7f0000004080)=[{&(0x7f00000019c0)=""/231, 0xe7}, {&(0x7f0000001ac0)=""/244, 0xf4}, {&(0x7f0000001bc0)=""/227, 0xe3}, {&(0x7f0000001cc0)=""/185, 0xb9}, {&(0x7f0000001d80)=""/85, 0x55}, {&(0x7f0000001e00)=""/139, 0x8b}, {&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/231, 0xe7}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/137, 0x89}], 0xa, &(0x7f0000004140)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x9, 0x40, &(0x7f0000004400)={r3, r4+10000000}) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000004440)=r5) r6 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r6, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:38:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9000000, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:38:18 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x125d, 0x6) 08:38:18 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "0200", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:38:18 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:38:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x100000000000000}) 08:38:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$bt_hci(r2, &(0x7f0000000040)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc9}}}, 0x6) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x2) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) dup3(r3, r4, 0x0) fcntl$setstatus(r3, 0x4, 0x4000) socket$inet6_udp(0xa, 0x2, 0x0) 08:38:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf000000, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:38:18 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x125e, 0x6) 08:38:27 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x200000000000000}) 08:38:27 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x11d, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:38:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x17020000, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:38:27 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10, 0x1000) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @private=0xa010101}, 0x10) read(r1, &(0x7f0000000180)=""/218, 0xda) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f00000002c0)='./file0\x00', 0x800, 0x6, &(0x7f0000000700)=[{&(0x7f0000000300)="2747b7fda5f68111e6833534af29754f074fa719a58c07affb9ff15c4f175eb098fc9c2fca8f990b8f5e8f7d7c45b29c9d66785acdbb6e552f45dde5aa93cbd70996fd1694607e3584a1026bb6c9eb41107fcbe17813928ea948da5cd3e688af659ecdde67a227cfb88ed3677fd427c6178725ef60b5f3d0c0655372c964d4b5659442ab60850acf117341987b526192181f2e71dec16dc737f1ad798f3bf9f663049f18910c359d2adae7077ac7ca854477cd3f256fb0f790cd69fa06c119581e92b08be8173c471d35baaca05376fd3023f0e46538a58ded", 0xd9, 0xa2}, {&(0x7f0000000400)="fff82682ed08829a0e0ec42b593c01a480a1a0d94814aca0b77187059edc20ed5aa7ba44bb8e056beb4cdef2562e11c2ad6b054c529a0cc757d77660b47d8a1972bde69c7308", 0x46, 0x8}, {&(0x7f0000000480)="f91f99c58acbf866e79f75b8c9bf3aa1430ee5571e1c07febb09ab1c508c1b0c6841ef9be457a10371c94397034f401be2ce2c6553e3103e9ddd402055abc6b736f82e431d1350b21278b5d9c3b10b5e266eeeb3b2be83595b63e72a3a9425f6850aec3545b8fb4d0112a81c03966f107815c066ec5221930a8dc24f41da85b4df751f843939ec1a6800e7e32b044ca1c906ea1ec3afa3922727a2eebe72edd721e753cede8f127eb02c67df905155b3e9760b0ff6cdb1f4fbb1b0b6cb6a9ee3bdbfac5febafa81c7807c3efec24bd0d857f0c647b29ce", 0xd7, 0x9}, {&(0x7f0000000580)="439c2bbbd48539c55af481bf53354525b090cb57ebf6b75727def469814ef01f0a6c2821cd825bcd664945849b330b7b1024fa941b", 0x35, 0x2}, {&(0x7f00000005c0)="f5e1a078c8621249a26f36f28594e727", 0x10, 0xb7}, {&(0x7f0000000600)="ec40dbd8b2e9f5fe77462dc590223276450be0ebc0393dce9c6f6c0a765033945d0eacac5c41700833550863a7fc8ce749806e2dd989a040ccd5cd60fc001c0703caa63631d1a21414d3cd81b120f8e1a1df00e5b03c52681f222762341a7d43feebdc60bcd2f6d44e63002b13b8512bda7e78a274538d7b14b72346a23cb52afe2f6399e190236e005ae3b3e8cc08a47deeb73a782ced5e2a4607639547c15ec4f0f8e4454653efca69b4ee4251fc4d4b89ebdac6ef671c46819e4e9cbabe6c5f6d5102a211b77900d6989baec1ef47d05beffcb5cbaf6809cd352b14486e20c5a8deba6fcbe092a9f836d54c259f15bc5e940de7dbadc8", 0xf8, 0x7}], 0x1000008, &(0x7f0000000900)=ANY=[@ANYBLOB="67727071756f74612c7573726a71756f64613db6ebd69c162c6e6f626c6f636b5f76616c69646974792c6e6f6d6263616368652c6f626a5f747970653d2b2c00f467329ec9ec727e5be5c87601ecbcddc9e943f775bf7ab06d0527df479601c9dd6ccf897136860ab6d47def05819998b6ab3f629c214feb1a535ee2298b05002ad40fd3170131cc869b1c8d35b35645f62cc89a950300000000000000b7092d355c9791a1d7678e11"]) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) ioctl$sock_bt_hci(r4, 0x800448f0, &(0x7f0000000800)="6746ceab0527b5d8b35fee07702897107d6a0bd82ac3b3929a9b6d0b8421c067db0d54f94917fbf8f4fd49a5ec1b50350e05c82d973b4c91db9d53bee0f713af50853fccc54430116f58f2bdc4d75c25a0a3032ee8407f0a4ae4643b4463cec5bc0d3271e07d993d8c49eccd4a353a882693789c95f9066260d155effb89f197dd1ae18a2e07f3fb9e50310ceba495b3d6944de64f6924845a358dcb5210158551b4223faec20618aa64a3a100b3e1151e15d3a7732a885fb661a9d9eac6dbd3e15ec7bd1574bb2ff2a8dfe606") 08:38:27 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "0300", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:38:27 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:38:27 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x125f, 0x6) 08:38:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x2, 0x8, "7af984", "897516", 0xff, 0x1f, 0x9, @any, 0x0, 0x1, 0x4, 0x3, 0x80, 0x6, 0xc}}}, 0x1d) 08:38:27 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "0400", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:38:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9effffff, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:38:28 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:38:28 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x4}, 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x2, 0x1}}, './file0\x00'}) write$bt_hci(r3, &(0x7f0000000040)={0x1, @pin_code_neg_reply={{0x40e, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0xa) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r5, 0xffffffffffffffff, 0x0) dup3(r4, r5, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000080)=0xfffeffff, 0x4) 08:38:28 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x2}) 08:38:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:38:28 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1260, 0x6) 08:38:28 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "0500", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:38:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) [ 1374.257327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1374.260513] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1374.262448] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1374.270880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1374.275454] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1376.293852] Bluetooth: hci2: command tx timeout [ 1378.342603] Bluetooth: hci2: command tx timeout [ 1380.389572] Bluetooth: hci2: command tx timeout [ 1382.437684] Bluetooth: hci2: command tx timeout [ 1392.665937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.667287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.780850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.782149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:39:00 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x8}) 08:39:00 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1261, 0x6) 08:39:00 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:39:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x8000) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:39:00 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "0600", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:39:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:39:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xfffff000, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:39:00 executing program 2: symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00') readlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/4, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) r5 = dup3(r3, r4, 0x0) flistxattr(r3, &(0x7f0000000180)=""/238, 0xee) r6 = dup3(r1, r2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000000)={0x6, 'lo\x00', {0xaac}, 0x9}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000640)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r7, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xfc, r8, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6}, {0x5}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x4bd5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xffff}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x610d}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x3}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x4009040) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffffffffffffffff}, 0x6) 08:39:00 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\b\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:39:00 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1262, 0x6) 08:39:00 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x80000}) 08:39:00 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x64) r2 = dup3(r0, r1, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000180)='./file0\x00') r5 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r5, 0xffffffffffffffff, 0x0) dup3(r4, r5, 0x0) fcntl$addseals(r5, 0x409, 0x3) recvfrom(r2, &(0x7f0000000000)=""/162, 0xa2, 0x100, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x100000000000, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:39:00 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:39:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x600, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:39:01 executing program 2: syz_usb_disconnect(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_start_enc={{0x2019, 0x1c}, {0xc9, 0xffffffff, 0xffe1, "9664495f1b2fcbf6591be8a63b1ed4a0"}}}, 0x20) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:39:01 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1263, 0x6) 08:39:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffff7f, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:39:01 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '+\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:39:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:39:14 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1264, 0x6) 08:39:14 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:39:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0x4}, 0x6) syz_open_dev$vcsn(&(0x7f00000000c0), 0x1, 0x0) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x1, 'netpci0\x00', {}, 0x8}) dup3(r0, r4, 0x0) write$bt_hci(r4, &(0x7f0000000180)={0x1, @write_eir={{0xc52, 0xf1}, {0x81, "7675dcfbc7dfdd2c40a4113a003ed951761766601b6b66656a27bb0f8ecdcba34033fbd251b0685ac3eea5b88267f6f73703f2443a6acac65d9b0cb702902cbe834c1962ad9f51913940be1c7a9aa091d57e209e923293cdae6af7efa92bde63abb37e6eb511590c67d54e3ae73024b2ca3406cda50ad5078925fd8db087830e33d0870a09348e013d1a238b0b52927a3a90a4546b1586ddeb5bce25d0d0fe7d5912709523c586c40aa3c181b2e7a58175cd3872437224d8c0a891bdcc00a3cff05cfc3af2648d45e08331cfc67a886aa53856847601ab68608442e04c43ff9267e396321080d3e721cb52f21b719f86"}}}, 0xf5) syz_open_dev$vcsn(&(0x7f0000000100), 0xffffffff, 0x105002) r5 = epoll_create1(0x80000) r6 = dup3(0xffffffffffffffff, r5, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x40000, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(r6, &(0x7f0000000000)={[0x7]}, 0x8) getsockname$packet(r4, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:39:14 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x1000000}) 08:39:14 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, ',\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:39:14 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:39:14 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) r5 = openat$incfs(r3, &(0x7f0000000100)='.pending_reads\x00', 0x101000, 0xa0) ioctl$sock_bt_hci(r5, 0x400448e3, &(0x7f0000000280)) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") r6 = signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x40e23534879305af) r7 = dup(r4) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000140), 0x6) r9 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r8, r9, 0x0) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0x3, 0x1}, 0x6) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0xe7df) bind$bt_hci(r6, &(0x7f00000000c0), 0x6) 08:39:14 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1265, 0x6) 08:39:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:39:14 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:39:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffffff, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:39:14 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x2000000}) 08:39:14 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:39:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) tee(r3, r2, 0xff, 0x4) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:39:14 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '3\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:39:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:39:26 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1267, 0x6) 08:39:26 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '<\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:39:26 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x8000000000000}) 08:39:26 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448df, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:39:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:39:26 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup(r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x1}, 0x6) fcntl$notify(r2, 0x402, 0x80000016) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x29) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0x100}, 0x6) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r6 = dup3(r4, r5, 0x0) ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f00000005c0)="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") unlink(&(0x7f0000000040)='./file0\x00') sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) sendmsg$AUDIT_USER(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="75150000eddf6754288e6c93cffb95a37598ab4b970000000064cbf46bd407a603e58698cf8f182a4ced5d6502ff0c5e96ec95732ad05890a17eeac7b7287a114eedeca3fad40fe27981a070fddf3927e1379f7e9c446c097ce43815146b1aacb20386324c9898193e3c0d66a59395dc81b6cc62a14b8f4b2a04693471f372fee0d7fadc54e0eef93d8ee4a90b6d0fd19c3f55eaee662c627fbb44ff1b086833e03451643680d34d4d9ffc187ec3304d30"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x2000c844) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f00000000c0)="368ecd1c55d79eb57d5685679f4ef2d852276b67f7d1a41534b55381d96c6c0a683451875018db010f73f0e33de046e5d68425dcf058e6b65051061265f0") r7 = dup3(r2, r3, 0x0) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0xb, 0x6, 0x201}, 0x14}}, 0x0) ioctl$CDROMRESUME(r7, 0x5302) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, &(0x7f0000000280)="050000ff0000000072bd420f7cea8780f1327ba94667c0c579b2ff6cdc83629d5a5fbcb3fbbe14a0ab4b0659ca3bce0270e73919bab81784465bfbcf92e781275dc3ce3514cabd899a2c11b3cc0d6961a35458570c6d3f00000000000032286f59e0a491554e") 08:39:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0xf, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:39:26 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:39:26 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x100000000000000}) 08:39:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:39:26 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1268, 0x6) 08:39:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x1d01, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:39:26 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '`\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:39:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = getpgid(0x0) fcntl$lock(r3, 0x25, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r4}) r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0xa0840, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, r8}}, './file0\x00'}) sendmsg$unix(r2, &(0x7f0000000900)={&(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000600)="d14084fe8448947e3be501e397a4e3df688b04aaacb8ff5d2644810fc0c7b8ee76c0afc78ffcdf5f1c652a53f2e713424ec28038d709c5fce5df7e5543c39c1c41ea112cd799d74999e61303f06720f18c0df5375cb79e29c5b4cbf15fd8400d8226cbdf247ddc816f73a85303d8d17cb7f303fe54167da00ee144e6cc92c26be0937274dd04c7aa3badd6b4143f360a8756f7cbb20979a53d5682de88750673559b3c38fc7e159aa46353f7c5ef60083fc4020c45be8c3648113ee5e42c654e561f1d191a", 0xc5}, {&(0x7f0000000100)="9a5d449d1774b31c090f42dfe99c21a513538dbbb52b0f436dda6bc5df8ba5c5a6536005b791dd79209532e68077bd73d0a768dab058e8ca66ad3dfe", 0x3c}, {&(0x7f0000000700)="562d3a43a8c0391304355db15634112bd7abfd278cad3fd6999e523b2a659d4045f1f4722be77f5f673e18e71ee5c0981a0b1bbc51eb9ef86eb5b1482463c26c849d17d61c79e9e6ce81e0c71bea358c4bd7a0e6cf9be361e4d14e54cf4190a3f92a433a8164518fca64a8151f64624b870f40e42aad08a00fd93c48a442757483295d36e78597c86696a989ce046cb8b2ec1215fe81db3a58a1c4c893c2558afaa3010cc564a8af2d874164eb940395719de8444f00c27fb1e2aebece7c9932403103ce0a282ce58ddc338fd8d7ad", 0xcf}], 0x3, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r8}}}], 0x20, 0x4000000}, 0x810) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x28, 0x3, &(0x7f0000000280)=[{&(0x7f0000000180)="dffeea1fad0e1f5fa83ed620477172dc96e84aec6ec724e865dff5293ae981913a1145fcbe3657a2a0a85a214db99c818165b93e868423b2816781da87d9f507ee1ffe510b46e762e23c48bae5fbd12b883f532b91ea5efaea1aa7864433cd2ea894baec48ffb7f35bce807b5717a60f22dbc97f27a2298f5b4a0d4b9a2e492b10c67f23276be5986d490917f7a7d9ac8d3ee2136eef2a4a569f1c26352ea16876b4154a3ee4f5dbb8b2ed9f9bfd60a95a865810b41ae0ea7f5facf657ec519bc1022c437c869a712f", 0xc9, 0x1}, {&(0x7f0000000400)="8e61178f105d466a50ac7fc3d29cd31c70cbf70f40685ac0e0382c9c7645c6b6c78272a9a7cf5a0c81602718b75b8ffaf8ae8eea2cadedfb84e227c2374d3b4bc36377f6708c71d2358ce2422cc2428bcaa831b6beeab025baf1874593cd2ea9d7be97af50a1266e1d309c3bacff572698ab115a736286a42aea63bfa132f69d23a62332649fdc09be5ef3738e0600bb98f3f9c3e0c247d90a33ec5a007e86b672f2b78a5725ef54853dceab8dd171815904c83d5c8555a143215e05894e54a39eca", 0xc2, 0x8e49}, {&(0x7f0000000080)="d76828cdc6fa22973d729cf7a38080fec3b64386203a2714ebc8af5c06175b0243e1fc08fd8f50da6ef9cc705473b3fbbbbccb4248b8288ddc6fbabd934305fc0887", 0x42, 0xffffffffffffff2d}], 0x800000, &(0x7f0000000500)=ANY=[@ANYBLOB="6d61703d6e6f8e6d616c2c66756e633d43524544535f434845434b2c686173682c61707072618a73652c636f6e746578743d756e636f6e66696e65645f752c0049232a380bda9983a8ea2b7e15f7d4d8db88129b8cf8b1fb7598f0a2e240b6ba9f446018332d721104ff537928300d994fef0f"]) socket$inet6_udp(0xa, 0x2, 0x0) 08:39:26 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x8, 0x2) 08:39:37 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:39:37 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x200000000000000}) 08:39:37 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:39:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r3, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@loopback, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001, 0x2, 0x6, 0x0, 0xd5f, 0x8}) 08:39:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf000, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:39:37 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1269, 0x6) 08:39:37 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, 'h\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:39:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x22, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) [ 1440.329101] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. 08:39:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x25, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:39:37 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1274, 0x6) [ 1440.427533] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. 08:39:37 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "8200", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:39:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x30000, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:39:37 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x2}) 08:39:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = accept(r0, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000000)=0x80) write$bt_hci(r1, &(0x7f0000000180)={0x1, @le_start_enc={{0x2019, 0x1c}, {0xc8, 0x3, 0x5, "e3b60b5213f2985acef38d24db572761"}}}, 0x20) 08:39:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x180, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:39:46 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x8}) 08:39:46 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x80000, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:39:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) write$bt_hci(r3, &(0x7f0000000000)={0x1, @link_key_neg_reply={{0x40c, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}}}, 0xa) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r4, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:39:46 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000100)="2c8c54bb12aefe1a32930f336cbc85e8134417f680e5") bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:39:46 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "ff0200", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:39:46 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1276, 0x6) 08:39:46 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r1, 0x400448df, &(0x7f0000000180)="993de4d4dff8816acdf8003f03f37671ae8b7aaf2b7e8a410ced340eab7dca0e5f58b61c61f2e54cee22f406506a1f6b64ba9670289596bf3b10ef5001d00f2e743c2a9504b0c74a742b8a0243cea12c016c281e6b2e3ddda29ff8dcc4a1f22423e86bf8fe1668844814ef7485189077d6807e158d2e5bd3") getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000a40)) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140), 0x6) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r5 = dup3(r3, r4, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400"/20], 0x14}}, 0x0) getpeername$packet(r5, &(0x7f0000000000), &(0x7f00000000c0)=0x14) 08:39:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0ffff, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:39:47 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, 0x0) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:39:47 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "000300", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:39:47 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1277, 0x6) 08:39:47 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x80000}) 08:39:47 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) dup3(r3, r4, 0x0) sendto$inet6(r4, &(0x7f0000000000)="715d707c8962b2b0a91dd164acaacf72d8884b26c9fa153d66be6e9f95c211b935516e629383f1bf1f4ea29b062afc2ff30b15f4a31040c65c2c", 0x3a, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x74, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1f}, 0x1c) 08:39:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x1000000, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:39:47 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) [ 1453.172267] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1453.175420] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1453.178233] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1453.185110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1453.188845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1455.269624] Bluetooth: hci4: command tx timeout [ 1457.318082] Bluetooth: hci4: command tx timeout [ 1459.365564] Bluetooth: hci4: command tx timeout [ 1461.413604] Bluetooth: hci4: command tx timeout [ 1472.284545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.285655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.345109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.346197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:40:18 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x1000000}) 08:40:18 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "000500", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:40:18 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:40:18 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) 08:40:18 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1278, 0x6) 08:40:18 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r1, r2, 0x0) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000180)="393d7db0a6edfdd49ea197530760d41b7b110ce14bebbfdcf23e31ed56806b1622dd598ef5cb8a0ba2ae80f221afcb246fdd4f0f90e1aa2ed66ef6b3121f567af09a8d5b17afc210f91c084ff7c45f032af0b2161e3d76223ceba3b7e8923e13327e234c23f048a4e9781a7c07eba34c186cf636c9e7d70a46714e286d62ed5b3836c6774a02d1e75ece06cabfbee88055e22de8bbf7ba1ef53a7824f18871bde328813ed72898445cf3e26feb830f9b3a1d70") 08:40:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x33fe0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:40:18 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140), 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r1, r3, 0x2) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r4, r5, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x81, 0x4, 0x5, 0x9, 0x0, 0x8001, 0x1490, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x4180, 0xffffffffffffffff, 0x3, 0x1, 0x1000, 0x7, 0x7, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, r5, 0x2) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000400)={0xf7, "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"}) 08:40:18 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) 08:40:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) open_by_handle_at(r2, &(0x7f0000000000)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0xb}}}, 0x10040) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r3, 0xffffffffffffffff, 0x0) r4 = dup3(r1, r3, 0x0) accept4(r4, 0x0, &(0x7f0000000180), 0x80000) getsockname(r1, &(0x7f00000000c0)=@ethernet={0x0, @link_local}, &(0x7f0000000000)=0x80) 08:40:19 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x2000000}) 08:40:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x8a, 0xff, 0xf9, 0x3f, 0x0, 0x10001, 0x1, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x992b, 0x1, @perf_config_ext={0x4, 0x2}, 0x8, 0x2, 0x800, 0x3, 0x8001, 0x8001, 0xe, 0x0, 0x1000, 0x0, 0x10000}, 0x0, 0x4, r1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 08:40:19 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1279, 0x6) 08:40:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0xfffffdef, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:40:19 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3000000, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:40:19 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "000600", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:40:19 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, 0x0) bind$bt_hci(r0, 0x0, 0x0) 08:40:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'netpci0\x00', {0x2, 0x0, @remote}}) 08:40:19 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00 \x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:40:19 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, 0x0) bind$bt_hci(r0, 0x0, 0x0) 08:40:29 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x8000000000000}) 08:40:29 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, 0x0) bind$bt_hci(r0, 0x0, 0x0) 08:40:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/keyboard', 0x200000, 0xca) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:40:29 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000000)={0x1, @write_sc_support={{0xc7a, 0x1}, {0x4}}}, 0x5) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:40:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x4, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:40:29 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00+\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:40:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x4000000, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:40:29 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x127a, 0x6) 08:40:29 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) r5 = openat$incfs(r3, &(0x7f0000000100)='.pending_reads\x00', 0x101000, 0xa0) ioctl$sock_bt_hci(r5, 0x400448e3, &(0x7f0000000280)) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") r6 = signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x40e23534879305af) r7 = dup(r4) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000140), 0x6) r9 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r8, r9, 0x0) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0x3, 0x1}, 0x6) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0xe7df) bind$bt_hci(r6, &(0x7f00000000c0), 0x6) 08:40:30 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x8, 0x20342) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000180)={0x6, {{0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x12}, 0xaf}}, {{0xa, 0x4e20, 0x3, @private1, 0x1}}}, 0x108) dup3(r1, r2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:40:30 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00,\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:40:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0xf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:40:30 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x100000000000000}) [ 1498.471040] Bluetooth: hci2: command 0x0406 tx timeout 08:40:40 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = getpgid(0x0) fcntl$lock(r0, 0x25, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r1}) r2 = fork() kcmp(r1, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000004200)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000041c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32=0xee00, @ANYBLOB="c40055800c001c00ff7f0000000000001631755509f84041983c06f91cbb2559fdb1177a8a91c68754655a8b2e3e0aa46c5c80071438503abf70a87deb36891272f11272872432b8210f6377c96aa02c6c854811dd946e32ebaa007aa1896d4e6be67a83996558955f03d343da2990d1da1bc5fae2d803e6f37c9bc85ca2f5f2d743a40b8af1605b12c431a9cb2dffad9bded68531360a8ec452b4f408005900", @ANYRES32, @ANYBLOB="8f00000000beeef20c2468cb33000000", @ANYRES32=r1, @ANYBLOB="049f74e92a4f01d000"/18], 0xfc}, 0x1, 0x0, 0x0, 0x40}, 0x48801) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140), 0x6) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r4, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000140), 0x6) r6 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r5, r6, 0x0) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:40:40 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x5000000, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:40:40 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) r5 = openat$incfs(r3, &(0x7f0000000100)='.pending_reads\x00', 0x101000, 0xa0) ioctl$sock_bt_hci(r5, 0x400448e3, &(0x7f0000000280)) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") r6 = signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x40e23534879305af) r7 = dup(r4) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000140), 0x6) r9 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r8, r9, 0x0) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0x3, 0x1}, 0x6) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0xe7df) bind$bt_hci(r6, &(0x7f00000000c0), 0x6) 08:40:40 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x200000000000000}) 08:40:40 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x003\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:40:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x25, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:40:40 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) ioctl$sock_bt_hci(r2, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") bind$bt_hci(r0, &(0x7f0000000140), 0x6) r4 = dup3(r3, r1, 0x7aea08053fe82fff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000200)=0x6, 0x4) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4) write$bt_hci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="01210c02b376245606a6aafe5c4ed27cbdddb7acb596f2ba837b7a9b89b6938117ddc552ea47786d6f895ed5f99e2b91aec709312e207e1a8d624b8a34657427ca0a7dcb5a2b9b550000000000002f13f7abc375"], 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1, @disconn_logical_link={{0x43a, 0x2}, {0x8}}}, 0x6) ppoll(&(0x7f0000000240)=[{r4, 0x5511}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0x8]}, 0x8) fcntl$addseals(r4, 0x409, 0x7) 08:40:40 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x127b, 0x6) 08:40:40 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00<\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:40:40 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x6000000, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:40:40 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x127c, 0x6) 08:40:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x74, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:40:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x7000000, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:40:52 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) ioctl$sock_bt_hci(r2, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") bind$bt_hci(r0, &(0x7f0000000140), 0x6) r4 = dup3(r3, r1, 0x7aea08053fe82fff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000200)=0x6, 0x4) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4) write$bt_hci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="01210c02b376245606a6aafe5c4ed27cbdddb7acb596f2ba837b7a9b89b6938117ddc552ea47786d6f895ed5f99e2b91aec709312e207e1a8d624b8a34657427ca0a7dcb5a2b9b550000000000002f13f7abc375"], 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1, @disconn_logical_link={{0x43a, 0x2}, {0x8}}}, 0x6) ppoll(&(0x7f0000000240)=[{r4, 0x5511}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0x8]}, 0x8) fcntl$addseals(r4, 0x409, 0x7) 08:40:52 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) r5 = openat$incfs(r3, &(0x7f0000000100)='.pending_reads\x00', 0x101000, 0xa0) ioctl$sock_bt_hci(r5, 0x400448e3, &(0x7f0000000280)) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") r6 = signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x40e23534879305af) r7 = dup(r4) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0xf502, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000140), 0x6) r9 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r8, r9, 0x0) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0x3, 0x1}, 0x6) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0xe7df) bind$bt_hci(r6, &(0x7f00000000c0), 0x6) 08:40:52 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00@\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:40:52 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x127d, 0x6) 08:40:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$sock_bt_hci(r2, 0x800448d4, &(0x7f0000000040)="4b94a971f9fd3799b57367bd78a4caffc7d3c23cff11170eeefbffa55ef5f5cfefe748cdc9af4564e6f1d5d68a26781c8e2cfe57b3bcfc2389d2bf9b2ef502fd9ed31d5841b7f3b0e92255a0146a32a3f87290cf9e89e4e6b031b88a33ee3ccec5ae1c368f91537f1a906eba8a86e1662fa28775f25999d8b8de40eb") dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:40:52 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0x2}) 08:40:52 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0x8}) 08:40:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:40:52 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x127e, 0x6) 08:40:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9000000, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:40:52 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00`\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:40:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r2, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x0, 0x80, "fe34b5", 0x1f, 0x3}) r3 = dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendfile(0xffffffffffffffff, r4, &(0x7f0000000000)=0x4, 0x9) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000140), 0x6) r6 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r7 = dup3(r5, r6, 0x0) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) 08:40:52 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0x80000}) 08:40:52 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x127f, 0x6) 08:40:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf000000, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:40:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x2, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:41:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:41:04 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) ioctl$sock_bt_hci(r2, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") bind$bt_hci(r0, &(0x7f0000000140), 0x6) r4 = dup3(r3, r1, 0x7aea08053fe82fff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000200)=0x6, 0x4) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4) write$bt_hci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="01210c02b376245606a6aafe5c4ed27cbdddb7acb596f2ba837b7a9b89b6938117ddc552ea47786d6f895ed5f99e2b91aec709312e207e1a8d624b8a34657427ca0a7dcb5a2b9b550000000000002f13f7abc375"], 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1, @disconn_logical_link={{0x43a, 0x2}, {0x8}}}, 0x6) ppoll(&(0x7f0000000240)=[{r4, 0x5511}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0x8]}, 0x8) fcntl$addseals(r4, 0x409, 0x7) 08:41:04 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00h\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:41:04 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) r5 = openat$incfs(r3, &(0x7f0000000100)='.pending_reads\x00', 0x101000, 0xa0) ioctl$sock_bt_hci(r5, 0x400448e3, &(0x7f0000000280)) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x40e23534879305af) r6 = dup(r4) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000140), 0x6) r8 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r7, r8, 0x0) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0x3, 0x1}, 0x6) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0xe7df) 08:41:04 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4b47, 0x6) 08:41:04 executing program 1: r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x14001, 0x10, 0x11}, 0x18) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x10c) dup3(r1, r2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r3, 0x0) mount$9p_virtio(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x2804004, &(0x7f00000001c0)={'trans=virtio,', {[{@cache_loose}, {@fscache}, {@version_u}, {@mmap}, {@aname}, {@access_client}], [{@uid_lt={'uid<', r3}}]}}) getsockname$packet(r2, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:41:04 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x1d010000, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:41:04 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0x1000000}) 08:41:04 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4b49, 0x6) 08:41:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:41:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0', [{}, {0x20, '&['}, {0x20, '-\n'}, {0x20, '((),'}], 0xa, "3cdbf772a11c536968ec6e293bc8107c88a444a3df1a2362e187bed90bede90759b052ce46753a28233e4ba7ffbe829ac4b57ba8145ed40156d7a713d1ab0113e1c5a7e2cb622d5139c59e61ffe283c1ebbe638ba8ea84e13e4603702c7c8139f85e6715648d51ea6e296b2394d3dac535dfb852c0e8c2c575887cb9e54eef0a85cf57ddaabb60a42c"}, 0xa0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r2, r3, 0x0) utimensat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}}, 0x100) 08:41:04 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "008200", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:41:04 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0x2000000}) 08:41:04 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) r5 = openat$incfs(r3, &(0x7f0000000100)='.pending_reads\x00', 0x101000, 0xa0) ioctl$sock_bt_hci(r5, 0x400448e3, &(0x7f0000000280)) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x40e23534879305af) r6 = dup(r4) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000140), 0x6) r8 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r7, r8, 0x0) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0x3, 0x1}, 0x6) 08:41:04 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c00, 0x6) 08:41:04 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c01, 0x6) 08:41:04 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) r5 = openat$incfs(r3, &(0x7f0000000100)='.pending_reads\x00', 0x101000, 0xa0) ioctl$sock_bt_hci(r5, 0x400448e3, &(0x7f0000000280)) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x40e23534879305af) r6 = dup(r4) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000140), 0x6) r8 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r7, r8, 0x0) 08:41:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x5, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) [ 1530.808444] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1530.811249] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1530.815434] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1530.824210] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1530.827557] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1531.063913] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1531.067713] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1531.076928] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1531.082910] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1531.087816] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1532.901749] Bluetooth: hci3: command tx timeout [ 1533.157584] Bluetooth: hci7: command tx timeout [ 1534.949744] Bluetooth: hci3: command tx timeout [ 1535.205690] Bluetooth: hci7: command tx timeout [ 1536.998298] Bluetooth: hci3: command tx timeout [ 1537.253957] Bluetooth: hci7: command tx timeout [ 1539.046026] Bluetooth: hci3: command tx timeout [ 1539.301529] Bluetooth: hci7: command tx timeout [ 1542.403779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1542.404408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1542.454176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1542.455167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1543.946088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1543.946896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1543.981226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1543.982840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:41:30 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0x8000000000000}) 08:41:30 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c02, 0x6) 08:41:30 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00ff00", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:41:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x6, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:41:30 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) r5 = openat$incfs(r3, &(0x7f0000000100)='.pending_reads\x00', 0x101000, 0xa0) ioctl$sock_bt_hci(r5, 0x400448e3, &(0x7f0000000280)) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x40e23534879305af) r6 = dup(r4) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000140), 0x6) creat(&(0x7f00000003c0)='./file0\x00', 0x0) 08:41:30 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) ioctl$sock_bt_hci(r2, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") bind$bt_hci(r0, &(0x7f0000000140), 0x6) r4 = dup3(r3, r1, 0x7aea08053fe82fff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000200)=0x6, 0x4) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4) write$bt_hci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="01210c02b376245606a6aafe5c4ed27cbdddb7acb596f2ba837b7a9b89b6938117ddc552ea47786d6f895ed5f99e2b91aec709312e207e1a8d624b8a34657427ca0a7dcb5a2b9b550000000000002f13f7abc375"], 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1, @disconn_logical_link={{0x43a, 0x2}, {0x8}}}, 0x6) ppoll(&(0x7f0000000240)=[{r4, 0x5511}], 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)={[0x8]}, 0x8) 08:41:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9effffff, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:41:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r3, 0xffffffffffffffff, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'sit0\x00', {0x4}, 0x4}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="abc10000010000", @ANYRES32=r1, @ANYBLOB="133c0000000000002e2f66696c653000"]) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r5, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r5, 0x0) write(r5, &(0x7f0000000180)="678cdf872839d0bc0ffeae6d07de58a83b8f06e2c9a2771c926ce4929486fb149a09841d6b2089cb76ebe35e071f71afdcc5f036359dec18903301eb5f0adf01e50534da9c95b2d30d16373f46d04391ac37109e9da0987e6a7515ab157d584c7f400bc8ec4059ad200dfdf97e60fc4fdb4a5921498011ead5de4fdb8951ed6f6bd0741ff745bf", 0x87) r6 = dup3(r0, r1, 0x5391b0dd18eeb5f2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff}, 0x20, 0x2, 0xfffffffd, 0x2, 0xffffffffffffffff}, 0x0, 0x80003, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x4}, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) 08:41:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:41:30 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) r5 = openat$incfs(r3, &(0x7f0000000100)='.pending_reads\x00', 0x101000, 0xa0) ioctl$sock_bt_hci(r5, 0x400448e3, &(0x7f0000000280)) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x40e23534879305af) r6 = dup(r4) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000140), 0x6) 08:41:30 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r3, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000000)=0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:41:30 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "02ff00", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:41:30 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0x100000000000000}) 08:41:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x7, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:41:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xfffff000, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:41:30 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c03, 0x6) 08:41:30 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00\x00\b', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:41:41 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, 'F}`', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:41:41 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync_file_range(r2, 0x1000, 0x1, 0x2) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:41:41 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) ioctl$sock_bt_hci(r2, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") bind$bt_hci(r0, &(0x7f0000000140), 0x6) r4 = dup3(r3, r1, 0x7aea08053fe82fff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000200)=0x6, 0x4) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4) write$bt_hci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="01210c02b376245606a6aafe5c4ed27cbdddb7acb596f2ba837b7a9b89b6938117ddc552ea47786d6f895ed5f99e2b91aec709312e207e1a8d624b8a34657427ca0a7dcb5a2b9b550000000000002f13f7abc375"], 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) write$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1, @disconn_logical_link={{0x43a, 0x2}, {0x8}}}, 0x6) 08:41:41 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c04, 0x6) 08:41:41 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0x200000000000000}) 08:41:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x8, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:41:41 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) r5 = openat$incfs(r3, &(0x7f0000000100)='.pending_reads\x00', 0x101000, 0xa0) ioctl$sock_bt_hci(r5, 0x400448e3, &(0x7f0000000280)) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x40e23534879305af) r6 = dup(r4) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 08:41:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffff7f, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:41:41 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:41:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x9, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:41:41 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "000082", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:41:41 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) ioctl$sock_bt_hci(r2, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") bind$bt_hci(r0, &(0x7f0000000140), 0x6) r4 = dup3(r3, r1, 0x7aea08053fe82fff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000200)=0x6, 0x4) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4) write$bt_hci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="01210c02b376245606a6aafe5c4ed27cbdddb7acb596f2ba837b7a9b89b6938117ddc552ea47786d6f895ed5f99e2b91aec709312e207e1a8d624b8a34657427ca0a7dcb5a2b9b550000000000002f13f7abc375"], 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000000)=0x4, 0x4) 08:41:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:41:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0xf, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:41:52 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:41:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:41:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3, 0x3}, 0x6) dup3(r0, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) write$bt_hci(r2, &(0x7f0000000080)={0x1, @logical_link_cancel={{0x43b, 0x2}, {0xc8, 0x4f}}}, 0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) dup3(r3, r4, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:41:52 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c05, 0x6) 08:41:52 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0x0, 0x2}) 08:41:52 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) r5 = openat$incfs(r3, &(0x7f0000000100)='.pending_reads\x00', 0x101000, 0xa0) ioctl$sock_bt_hci(r5, 0x400448e3, &(0x7f0000000280)) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x40e23534879305af) r6 = dup(r4) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) 08:41:52 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) ioctl$sock_bt_hci(r2, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") bind$bt_hci(r0, &(0x7f0000000140), 0x6) r4 = dup3(r3, r1, 0x7aea08053fe82fff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000200)=0x6, 0x4) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4) write$bt_hci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="01210c02b376245606a6aafe5c4ed27cbdddb7acb596f2ba837b7a9b89b6938117ddc552ea47786d6f895ed5f99e2b91aec709312e207e1a8d624b8a34657427ca0a7dcb5a2b9b550000000000002f13f7abc375"], 0x6) 08:41:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0xf0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:41:52 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) ioctl$sock_bt_hci(r2, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") bind$bt_hci(r0, &(0x7f0000000140), 0x6) r4 = dup3(r3, r1, 0x7aea08053fe82fff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000200)=0x6, 0x4) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4) 08:41:52 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cc2174", 0x3) r2 = dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000040)='#)!\x00', &(0x7f0000000080)='./file0\x00', r2) 08:41:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffffff, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:41:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x217, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:41:52 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "467e80", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:41:52 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c06, 0x6) 08:41:52 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0x0, 0x8}) 08:41:52 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) r5 = openat$incfs(r3, &(0x7f0000000100)='.pending_reads\x00', 0x101000, 0xa0) ioctl$sock_bt_hci(r5, 0x400448e3, &(0x7f0000000280)) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x40e23534879305af) dup(r4) 08:41:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0xf, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:41:52 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) ioctl$sock_bt_hci(r2, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") bind$bt_hci(r0, &(0x7f0000000140), 0x6) r4 = dup3(r3, r1, 0x7aea08053fe82fff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000200)=0x6, 0x4) [ 1576.294172] Bluetooth: hci4: command 0x0406 tx timeout 08:42:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:42:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x300, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:42:01 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r2, r3, 0x0) r4 = openat$incfs(r3, &(0x7f0000000100)='.pending_reads\x00', 0x101000, 0xa0) ioctl$sock_bt_hci(r4, 0x400448e3, &(0x7f0000000280)) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") signalfd4(r0, &(0x7f0000000000)={[0x4]}, 0x8, 0x40e23534879305af) 08:42:01 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0x0, 0x80000}) 08:42:01 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "4680ba", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:42:01 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) ioctl$sock_bt_hci(r2, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") bind$bt_hci(r0, &(0x7f0000000140), 0x6) r4 = dup3(r3, r1, 0x7aea08053fe82fff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 08:42:01 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c07, 0x6) 08:42:01 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0xfd, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10030, 0x7fffffff, 0x0, 0x0, 0x4, 0x34, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000000)="111a08a8bedab55b950f45a5ff967fa09b56d3b5df750faf4aab37ce66f11ea7ca5a") socket$inet6_udp(0xa, 0x2, 0x0) 08:42:01 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:42:01 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r1, r2, 0x0) r3 = openat$incfs(r2, &(0x7f0000000100)='.pending_reads\x00', 0x101000, 0xa0) ioctl$sock_bt_hci(r3, 0x400448e3, &(0x7f0000000280)) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:42:01 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c08, 0x6) 08:42:01 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) ioctl$sock_bt_hci(r2, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") bind$bt_hci(r0, &(0x7f0000000140), 0x6) dup3(r3, r1, 0x7aea08053fe82fff) 08:42:01 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:42:11 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r1, r2, 0x0) openat$incfs(r2, &(0x7f0000000100)='.pending_reads\x00', 0x101000, 0xa0) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:42:11 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c0a, 0x6) 08:42:11 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r1, r2, 0x0) ioctl$sock_bt_hci(r2, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") bind$bt_hci(r0, &(0x7f0000000140), 0x6) 08:42:11 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:42:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x500, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:42:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) clock_gettime(0x0, &(0x7f0000001d00)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000001c80)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000080)=""/100, 0x64}, {&(0x7f0000000180)=""/118, 0x76}, {&(0x7f0000000200)=""/67, 0x43}], 0x3, &(0x7f0000000280)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000000400)=@abs, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000480)=""/134, 0x86}, {&(0x7f0000000540)=""/126, 0x7e}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/179, 0xb3}, {&(0x7f0000000740)=""/141, 0x8d}, {&(0x7f0000000800)=""/156, 0x9c}, {&(0x7f0000000300)=""/1, 0x1}, {&(0x7f00000008c0)=""/152, 0x98}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/254, 0xfe}], 0xa, &(0x7f0000001b80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}}], 0x2, 0x10000, &(0x7f0000001d40)={r3, r4+60000000}) sendto$unix(r5, &(0x7f0000001d80)="6013edd0c0ecaa8518ca9f118bc99c501187db1067b4bf285f29de7efe283a7f9855e8d0e6f6294856e8be9c20d4e1c83f2c0bb5368d35b4a82338eaac9adb359567b319b87e91ee365e2b2e65549e77cce6629a6f2a132cd474999fea6b77358e7505f737281c6431103e155406819a90b22f40db5b9faf4eeb5655ec8c45e60ad8c0c2bdce3bd2a9bf60c62dfcb9b07afad275a196f84374ebb1e2ec5dbf84e64d1f5d0a8559cae5847f5dcc6a7fd49ddfce8825fb698f6b38ea8b872faf7fa25233186e1494670e3a7574c0691ec5b978d84288b4437f809687e4184c3eefd196a9e3ae84914869497a", 0xeb, 0x24000000, &(0x7f0000001e80)=@file={0x1, './file0\x00'}, 0x6e) socket$inet6_udp(0xa, 0x2, 0x0) 08:42:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x180, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:42:11 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0x0, 0x1000000}) 08:42:11 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0x0, 0x2000000}) 08:42:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x600, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:42:11 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:42:11 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r1, r2, 0x0) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:42:11 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x541b, 0x6) 08:42:11 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:42:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x33fe0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:42:22 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x5421, 0x6) 08:42:22 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:42:22 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:42:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x700, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:42:22 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0xa001}, 0x0, 0x1000000000, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x8400) 08:42:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0xfffffdef, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:42:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000140), 0x6) r6 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r5, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) renameat(r6, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff801}, 0x0, 0x0, 0xffffffffffffffff, 0xa) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:42:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:42:22 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:42:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:42:22 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x5450, 0x6) 08:42:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = signalfd(r0, &(0x7f0000000000)={[0x3]}, 0x8) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0x2}, 0x35) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r0, r2, 0x0) dup(r3) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140), 0x6) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r4, r5, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x3}, 0x6) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:42:22 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:42:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x900, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:42:22 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:42:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x4, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:42:22 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:42:22 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x5451, 0x6) 08:42:22 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:42:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:42:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:42:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0xf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:42:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0xf00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:42:31 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:42:31 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x1f, 0xf8, 0x4, 0xee, 0x0, 0xfffffffffffffffe, 0x22000, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x1400, 0x3, 0x3f, 0x6, 0x3, 0x7, 0xffff, 0x0, 0x401, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:42:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:42:31 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:42:31 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000000)="83a53228249cddced3e1f92f50f24af05eb5b18a4be9af1fc569bf6d1c43fd3ead557f165b09a2f14d5450f656983f3ebec54b32c3a2978247c36bb5931463a52b35e39b21e3a08197f966cfe2f4959b70eef84b59a3bb5462425a64179b90b1b8b2ee78762999996afad89a1f8c255f5744ac14cf") r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:42:31 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x5452, 0x6) 08:42:31 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:42:31 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x5460, 0x6) 08:42:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:42:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x25, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:42:31 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:42:31 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x40049409, 0x6) 08:42:31 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000200)={{r1}, 0x0, &(0x7f00000001c0), 0x1, 0x6, [0x29fa, 0x200, 0x1, 0xdc]}) r2 = dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = getpgid(0x0) fcntl$lock(r5, 0x25, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r6}) r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r4}}, './file0\x00'}) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x5, 0xff, 0x1, 0x40, 0x0, 0x3f, 0x900, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x1, 0x800}, 0x4180, 0x8, 0x7, 0x7, 0xfffffffffffff299, 0x1, 0x1, 0x0, 0x7f, 0x0, 0x800}, r6, 0xa, r8, 0xb) bind$bt_hci(r4, &(0x7f0000000140), 0x6) getsockopt$inet_tcp_buf(r9, 0x6, 0xd, &(0x7f0000000400)=""/4, &(0x7f0000000440)=0x4) r10 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r4, r10, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r10, 0x40485404, &(0x7f0000000140)={{0x0, 0x2, 0x8001, 0x2, 0x4}, 0x4, 0xff}) 08:42:31 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:42:31 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4c00, 0x1ab, 0x2}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r3, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r5, 0xffffffffffffffff, 0x0) dup3(r4, r5, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) dup3(r5, r6, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) [ 1617.264443] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1617.267120] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1617.269005] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1617.273096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1617.275702] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1619.301674] Bluetooth: hci4: command tx timeout [ 1621.350598] Bluetooth: hci4: command tx timeout [ 1623.397580] Bluetooth: hci4: command tx timeout [ 1625.445571] Bluetooth: hci4: command tx timeout [ 1636.200972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.202492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.274618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.276212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:43:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x1702, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:43:03 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:43:03 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x40081271, 0x6) 08:43:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x74, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:43:03 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:43:03 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)=ANY=[@ANYBLOB="0159380488b90000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) 08:43:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000240)=ANY=[@ANYBLOB="010000e79ff33f92b65201638b7fa7df43a1000100000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r2) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f00000002c0)={@rand_addr=' \x01\x00', r8}, 0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1bf29d665dd48e6c9c085f5e9f99a305939391ab2c7f7c62a848", @ANYRES16=r4, @ANYBLOB="000429bd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b0000000800040047df000008000600", @ANYRES32=r7, @ANYBLOB], 0x98}, 0x1, 0x0, 0x0, 0x20000004}, 0x44080) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000180)={0x3, [0x6, 0x80000000], 0x1f}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:43:03 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:43:03 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00`}', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:43:03 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x79, 0x8, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc134, 0x0, @perf_config_ext={0x8000}, 0x6000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:43:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:43:03 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x40086602, 0x6) 08:43:03 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "01807e", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:43:04 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="379f5bb4140005547f068ffa2dfab070a976f0a9882bd9ab50b68b0dd0d3f9e1bd735cad3d41abaf6d0f000b1600000000000000000000afaf8f4a74ad62d2b8e556e53f5a1a190b4c59a7a27b66fa773e124d1e69d5cb2f8464b86ad002c1943a3495d3ca656c6c253e460c5a142dd4092643ee466df9c7176f752644102b121bd4740fbb07dfc896320d275d376a9267af"], 0x14}}, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x2, 0x81, 0x81, 0x5, 0x0, 0x0, 0x8810, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x40, 0x0, @perf_config_ext={0x100000001, 0x7}, 0x40, 0x2, 0x1, 0x8, 0x100, 0x200, 0x1, 0x0, 0x8}, 0xffffffffffffffff, 0x10, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:43:04 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x2, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:43:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r1, r2, 0x0) write$bt_hci(r1, &(0x7f0000000000)={0x1, @le_accept_cis={{0x2066, 0x2}, {0xc9}}}, 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 08:43:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0xf000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) [ 1654.120724] Bluetooth: hci7: command 0x0406 tx timeout [ 1654.121920] Bluetooth: hci3: command 0x0406 tx timeout 08:43:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:43:12 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) dup3(r1, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:43:12 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:43:12 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "01ba80", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:43:12 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x40087602, 0x6) 08:43:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x30000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:43:12 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0xffffffffffffff51, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:43:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40000}, 0x0, 0x10, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3, 0x97, 0x7, 0x82, 0x0, 0x3, 0x200, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x2, 0x1, 0x5, 0x80000000, 0x8, 0x8, 0x0, 0x5, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x401) 08:43:12 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x40101283, 0x6) 08:43:12 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:43:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:43:12 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r1, r2, 0x0) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:43:21 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x5, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:43:21 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r1, r2, 0x0) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:43:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x80000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:43:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:43:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140), 0x6) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r3, r4, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x7c, @time={0x3, 0x7fffffff}, 0x1f, {0xea, 0xff}, 0x8, 0x1, 0xfe}) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) connect$bt_l2cap(r2, &(0x7f0000001b00)={0x1f, 0x0, @fixed, 0x0, 0x2}, 0xe) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000180)=""/238, &(0x7f0000000000)=0xee) dup3(0xffffffffffffffff, r4, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:43:21 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x40101286, 0x6) 08:43:21 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:43:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xbe5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004800) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000140)={{0xffffffffffffffff, 0x1, 0x2, 0x3, 0x9}, 0xfffffffffffffff8, 0x7f}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) dup3(r3, r4, 0x0) fsetxattr$trusted_overlay_opaque(r3, &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x2) 08:43:21 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x6, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:43:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:43:21 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r1, r2, 0x0) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:43:21 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x40101288, 0x6) 08:43:21 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "ffffff", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:43:21 executing program 5: perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x79, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x102, 0x0, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x0, 0x0, 0x1, 0x3, 0x3}, 0x7, 0x8}) 08:43:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0xf0ffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:43:21 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="e6135c995e3e9d19140000000b060000000000800000000000000000"], 0x14}}, 0x0) accept4$bt_l2cap(r4, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) write$bt_hci(r2, &(0x7f00000000c0)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@any, "99e9ef9bd3254a6cd4b8685e1fd840c1", "2d14d477cb4780afa429c7c21077495b", "87d741e23619f83170835e754abeb650", "14bfde0b9f933a8b3d7aa293e74b9c85"}}}, 0x4a) socket$inet6_udp(0xa, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x54f201, 0x48) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r5, 0x0) sendmmsg$unix(r5, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="d6f57eab00ff03e78139bd452291d5", 0xf}], 0x1, 0x0, 0x0, 0x20000880}}], 0x1, 0x804) 08:43:21 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:43:34 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "ffffff", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:43:34 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:43:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x7, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:43:34 executing program 5: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x1ff, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:43:34 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x401070c9, 0x6) 08:43:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:43:34 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) r3 = accept4(r0, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x80, 0x0) r4 = signalfd4(r2, &(0x7f00000000c0), 0x8, 0x80000) dup3(r3, r4, 0x80000) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:43:34 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:43:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:43:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x8, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:43:34 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x401070ca, 0x6) 08:43:34 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) dup3(r3, r4, 0x0) fcntl$dupfd(r1, 0x406, r3) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x3, 0x231, 0x7fff}) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000240)='.log\x00', 0x240, 0x84) r6 = syz_open_dev$vcsu(&(0x7f0000000280), 0x2, 0x200) ioctl$SNDRV_TIMER_IOCTL_TREAD(r6, 0x40045402, &(0x7f00000002c0)=0x1) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x7c, 0x18, 0x81, 0x0, 0x9, 0x1000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3ff, 0x7f}, 0x8860, 0x6, 0x2, 0x2, 0x3, 0x1, 0x9, 0x0, 0x1, 0x0, 0x6}, 0x0, 0x10, r5, 0x1) 08:43:34 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:43:34 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "ffffff", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:43:34 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:43:34 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) sendmmsg$inet6(r3, &(0x7f0000001200)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x82, @empty, 0x1}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000080)="f387469783ad179b9856cdbef1219e2266b634479dde8f453e2a832575b6d6b6183b5d575d9349aa7e9d4355d3c53211681c6321c6f215f90cc621fdf185d1090f9cf905aa69ae167083fdf24a940e592e19de77997b5d9f04ea32cbaaaf35c57e6b7fa6eedb8439b1edeb2de590d105a1c43cb30f45bd0fbb3522a45709a6e4d5f759d2eb03ee60ca6aa6c9cfce1c84cebbcf6b416749160e5a622b549f5a57614ded7cbbf6b59a198545f25dfe27bd2dff2e653a0dcb08562baab63b61e4", 0xbf}, {&(0x7f0000000180)="b5d999c4c9771e8a29eaece6ff21d94ff5605ad8b4437a0b73c76c721deae107be1bb0b16dae2687da663b82f134bdda156b2d58f02a10b4f7e164ef2536c50d1d51553acfdaa8cdd5b839277e8f25ceb215d1d05dbce7cdaa757cd9a1e6730738dd1fcdc12866aed7171b2e06c6ba4aa84658b4de2cf48b7709157248717d47eab406c1d2779ff00aa678", 0x8b}, {&(0x7f0000000240)="18350cfcf1b82d4be58aa78f9d7286f4472c65ad558bd96955e675d544437ef4465bbf5308f9ad7ca9c5186cd25c663f7931a5a1532cfe2d49ca0b17230209a5e8bc78938f31258035064b166ab7ec1891f3dfb2f052b5f8d905c96f3ed354e86eed39896b2a4f2062cbaebdba441283568b3dcc7e19ce7bbc41e105447a18ef11700e5ef46d37060fb46370624f1ef023d840ba55ba1fedf2075459c3cf65ade378ba1b244c9dde31daf749ed8c35f3545f1b93c76677e01f8000dc8c843196363959a9f7adc643a92546cd795ed68f5b51ac0506981660", 0xd8}, {&(0x7f0000000400)="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", 0xfd}], 0x4, &(0x7f0000000540)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}], 0x58}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000005c0)="9b750d9a453cc4fb12f08cce90ab47ba317517c8c055f18b019f16b3f283a366dde57102ae4a488dacaed38e11739e5f06c53b934d28c572522208f5e35993d04d0e37c66bef271992e1b5e1d8ea0bd2c67e98b791f6305d7a76eb174692592d67e0c5fafe1140ea6acd244e4edeb3dc2a8a2e", 0x73}, {&(0x7f0000000640)="9608316d5848971dc00507b747a058e215b79d68df2e13419c22126b0cc526bacbf1b5ccc3e6ed3492790f697254bcf6093b189147a95ffdd22b87630308bdcde8ea2b9765e08ba535d4d797aa3311c4707d4d0694b5345a60a061fb4883123587995a97a0ef314f44706f0e2b0fedcf7bb6555fdfcf2f4a0760a5c7359831427282d26aa3881f0a07c2fda8ce98c09fec396448cf80b53623e41179a7e8928f2951300545ecea2472ad31129598c99ce276bd98d6500c9c7a502c218f96497cc4a6", 0xc2}, {&(0x7f0000000740)="243b167a377667989c91", 0xa}, {&(0x7f0000000780)="98467febdda5875ab760790c4fe410e3e9865df5fa3a2c56d9da470d442dd399ae1f4b1d6472a064f59cb9570964405f982a2d831bde87bc2ff02ce1694373d29d1e18d4bc9aa9a6d61f4b1fac446e30b2349883e13129eec63e85f9e011ecd15e8428a13958c9fb9f1a5cde1cb894ff4731d3296b83fb11741d663601537761fb47c8d54b05d283c6917ab60486e4e416205a82495dc04f036209967ca78314e40edf332d7e618099f9be09f526de661542464a1229acea2ea839ec166481f157bf1696cca2", 0xc6}, {&(0x7f0000000880)="2bf024cb6a980a602b43a0752b48fdcac9dd1fb4e7d73e9b94f9c8b241c5061c001f5fce05da53441db9c263ff0a3c7611ee61a67c303e26121b5ad642f4351307d3dfc5fbd840b19f409aea741923d0c4fabf4814df22d47655eda041f45eccf1a3086335b9d439c5d23ea007d97e4a679e67a152f1ed0e6bb83ef7ba3d8e826a837a092fb5c6f5a514fc2e506bf6b40de5b6", 0x93}, {&(0x7f0000000940)="01126715716eec03ef6c5ff616ef116f66474a9b6e33938630db64145bef5da3fecd6c8022081e5f259ba23d11f9985ba8cf548f60f20c0ada3a0d32d3981a3e814df54e6ec4e67fd3bb0f272f50489839e0a7f5cd67c0f871e90c4e7a", 0x5d}, {&(0x7f00000009c0)="f7f75deca648e555344d32b0f6b9ff4fad88bc9fa13b0176033d3d5e02e83ce7e511f5e077fbd5cba9f8134df0543c8131d63b832a18f6b13414470f0d2f49bc2fb324ece80c6a60b003abaa20a418ff02a8c99b3b65dd05f1dde2a0937fb1353c", 0x61}], 0x7, &(0x7f0000000b00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @rthdr={{0x28, 0x29, 0x39, {0x67, 0x2, 0x2, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffff8}}, @dstopts={{0x20, 0x29, 0x37, {0x33, 0x0, '\x00', [@ra={0x5, 0x2, 0x8}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xffffffff}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000bc0)="b6ab23572d19359a20b747886f5c10ac9a43ddc9b36c3a44c2ab1d86936700e1d3f87ccd94bb1ebf30bd3c29faef9b008fdb8f15c883a6556d6bf8c7e8294cfa9bb2e1f9852dde17064af0b6e5792f9feed44512400908413c19f7bd09492f2531bb978b46ea6a3394ffa928cb86572943f6c951b369b24930614bf55191eba70e853c95b8f36388cd20fd056b782ad4bc24cf0b01a9c997d8516540b66eb1a97976", 0xa2}, {&(0x7f0000000c80)="5105330db0d172f96eff12b9548f583d98c184250a56c1be6068dd9183981ccd066cfe17bc9568cb219521180a23f47a97617425b001a421e21581d7190b2690c158727e98f09426d278dfe657ce178d3ba46415a41f674573673649a605bcc9facc112beea7ee4c0f7b66bbd97be752ed624a7a428cbddd5cfd52a0f80fcf6cbbcf70fd97e4e259d20807ba5142e36bfc5d70b01dcba8e139e6563e1e5efa99428cd50b33609edce4579c669267eede3b3db275075c57cb57e81ca3dd40a40857f81ab0a2614159787cc2ac6297fca0a1da", 0xd2}, {&(0x7f0000000d80)="cc15a9ed8e758868916b8fc5634ba5d9309f84b183f7b2e8bf4ac88c8c7dc64e6df354da3c10548fe0df3331f9122f11310d3583d671a1ea60577c4d51059504a72e5e9fb6e468eda1c2093351c0d4d3931261609c6a5495c1d67bcfefa8e5fccd8a49421d6aedc20336416bec9ef657873d274bfa0b320b2e52369df0a22eae4b15810edfe340975b7ac1aedfbd64184ce903", 0x93}, {&(0x7f0000000e40)="3c3b83e75d5d7a7e466877280e42df88bfe776f394df3bd5b08b6aa6201e6f1041c6697158d960141c7504f5f839ae2460c0f01ce054e1c3690546e438d58f5748f2147901", 0x45}, {&(0x7f0000000ec0)="cb593fd530cd860d4789e9950814d65d69bc90cbb3dc03825f80a6f410429bbbc5ce28f5a95a5950ba282f2cb8bf610a8513bcc70444ee1e51177e", 0x3b}], 0x5, &(0x7f0000000f80)=[@hopopts_2292={{0x88, 0x29, 0x36, {0x33, 0xe, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x8000}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x7}, @generic={0xff, 0x3b, "5665a9072d3976a642e681e6053f2d72b5b5c9fada313f552bbc7d82221fc8e5a34c07aaef912b7acade58bcc9e30239037317d98fbccd05e00b03"}, @calipso={0x7, 0x18, {0x1, 0x4, 0x81, 0x8000, [0x6, 0x6]}}]}}}, @rthdr={{0xb8, 0x29, 0x39, {0x2c, 0x14, 0x1, 0x9, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private2, @ipv4={'\x00', '\xff\xff', @local}, @empty, @local, @dev={0xfe, 0x80, '\x00', 0x2e}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @empty, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x2b, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x7fff}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7f}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x33, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0x4}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r6}}}, @hopopts={{0xa0, 0x29, 0x36, {0x6, 0x10, '\x00', [@ra={0x5, 0x2, 0x3}, @ra, @hao={0xc9, 0x10, @loopback}, @generic={0x0, 0x5e, "ac074734426ef5a0b2abaa643a510c2f0970e20ce8e81020423195ec0ffdd2a47583c4c966d7aac07c7e8d7dc20379ae3554c7e808cc0a37ebc8c785dbbf0647fc6bdeede0f71ec43e5639ad84b06bf62d17fe7754ae8bcc1cab4a62325e"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x97, 0x60aa}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffff7}}], 0x278}}], 0x3, 0x20000000) 08:43:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x3000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:43:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:43:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x4000000040000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg$unix(r1, &(0x7f0000000940)=[{{&(0x7f00000000c0), 0x6e, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)=""/16, 0x10}], 0x1, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000000700)=[{&(0x7f0000000540)}, {&(0x7f0000000580)=""/176, 0xb0}, {&(0x7f0000000640)=""/158, 0x9e}], 0x3, &(0x7f0000000740)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000000900)=[{&(0x7f00000008c0)=""/46, 0x2e}], 0x1, &(0x7f0000000d40)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x160}}], 0x4, 0x2141, &(0x7f0000000c00)={0x0, 0x989680}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xa4846, &(0x7f0000000c40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag}, {@nodevmap}], [{@appraise_type}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fsname={'fsname', 0x3d, '^:'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@dont_hash}, {@smackfshat={'smackfshat', 0x3d, '.,#\\&r'}}, {@appraise}, {@dont_measure}, {@uid_lt={'uid<', r5}}]}}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) fchmodat(r6, &(0x7f0000000540)='./file0\x00', 0xb4) close_range(r7, 0xffffffffffffffff, 0x0) dup3(r4, r7, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x9, @private1, 0x1}, 0x1c) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:43:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x9, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:43:45 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x2, 0x8000000}]) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) dup3(r3, r4, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r6, 0xffffffffffffffff, 0x0) dup3(r5, r6, 0x0) io_submit(r2, 0x3, &(0x7f0000000580)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0xe, r4, &(0x7f00000001c0)="54158e49b67b66b756cf516a847fecfd1d1f4b77cd0377107752d172ca2093295ade7a0211d0b79b80016b8524b819e9b2218bb9d6028bd2295830decdac2f6a1c3dc0915a7bbd72ffe9f9f6d422c6aa49541874ab05ed6681128b5fa55e820f32c1b45398367465e8355abd367d7d4e203e5a16ef455179e545dd5d6dc9f2b72580e964907c0c91c3fe5b49fcdc7885d5eb7db4ea76f251d009a4b2d1d36e2b3c94257458f88e10e864e75f8c56fc37251783b98dc7b9f7800d74055db73a94a3f2caa3ea905334de93", 0xca, 0x7}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x1, r0, &(0x7f00000003c0)="0912f2d420e49dd53a4c931481a4c0f09cf02c7fc6ff2828b5dc857eb3727c3c26111479acd51fef3cfdd098e6c8af3d32dc04def0f12418bded2ffb029c4d8c6f9ce580c46d6e86f245d1198b49b9acc6fdaf6920f5e27498b95279120276de9562d762a497c7b7c82362b649f78b7eafa291007c7c430e2294f8401b66ea109147af5c9856a4fd86cb9b6abf1501af26b62cc029f6a3ce170081881828a981dd3aa3a79b9d84abd5efaf48e8fc9d025555a73bca6f321956199707975c7df61fdd20cbd8e7a5830494d42cc2b968090a2af85e95bde92f8ef866a24cb679898dc97d96e185ce", 0xe7, 0x3, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x1f, r5, &(0x7f00000004c0)="ade84f37a810b7284fe143dcc704ec158b176abc14f2e7ab1f743c0eb756e9f4d2cb05824e0614930976a9df8ca43ab47ae042105737847611c9bf5ec241dbb89edfafbdc170d6c427d554f21d226118ca3688d3dda6bce58fcb8e901a49e83994c746b6c97d649658bb63f370ef2eaba0d4c6", 0x73, 0x0, 0x0, 0x1}]) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x101200, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r8) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:43:45 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x401070cd, 0x6) 08:43:45 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "ffffff", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:43:45 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:43:45 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:43:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0xf, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:43:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r3, 0xffffffffffffffff, 0x0) recvmmsg$unix(r1, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/1, 0x1}, {&(0x7f0000000080)=""/64, 0x40}, {&(0x7f00000000c0)=""/13, 0xd}, {&(0x7f0000000180)=""/214, 0xd6}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x6, &(0x7f00000003c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000440), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000100)=""/31, 0x1f}, {&(0x7f00000004c0)=""/240, 0xf0}], 0x2, &(0x7f00000005c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/51, 0x33}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000680)=""/147, 0x93}, {&(0x7f0000000740)=""/99, 0x63}, {&(0x7f00000007c0)=""/160, 0xa0}, {&(0x7f0000000880)=""/85, 0x55}, {&(0x7f0000000900)=""/220, 0xdc}], 0x5, &(0x7f0000002b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000002b80)=""/143, 0x8f}], 0x1, &(0x7f0000002c40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB="1c0000249fe7ffff21008058", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xf0}}], 0x5, 0x40000001, &(0x7f0000002e80)={0x77359400}) fallocate(r4, 0x6e, 0x9, 0x3) dup3(r2, r3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r6, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003940)=[{{&(0x7f0000000a40)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000031c0)=[{&(0x7f0000002ec0)="d18bb1c8c0ec825b4ed2402c1c16e394090617c224fa2b6bc4c7249667ee17c9d7414d097c12d89c78001a40126f9b9a94e45fe5c6f4574049da57d9440b629225b829fcd44c52ae27a71032b5a9ba15cea9302182346871752590ebb7ae46c17f7b3384b08b99c781684cea4d135e3e037b9858d4b1a4c643ff7fcecc0f66638075b5d4e94ed08d04f77f810797298ab7a3d190e93e1d240526b725e0a715d96e482f586346f840a60c403558e004a5f79eb2ce971f2e294af2721a25b034ab14565a35e68adf1e0160c64d307875678a5196714380ba85c6bf12a0949204b6b859cd3db6a358bd73417d2db2f9856435d290b51fde3fde", 0xf8}, {&(0x7f0000002fc0)="195a3deedebec8bda21b469b51b693c78300473a99096ac15d5bdce68b3f0c057e3743c3bf7890ec8f1077276a38a6d1bdeaae07d7bb2040a97eadf6a0411afc650a615e016bee0e66d25016969a9a75b3e57e2ed3aa4a6b373d6df39d5ba6faeefae3bf47e698ffd002a9e1b8f9fb44a7fe5eaec6b844ded8a3b26b900716c259af68ecb7", 0x85}, {&(0x7f0000003080)="ad0c203e7e5a4c22388d043884e95895e3a3da18", 0x14}, {&(0x7f00000030c0)="0a933a7b2d5d0b762f82b387d2416e690d59c6d2ba6abde224065aa1286629011c0ad51d7062cb335d957e258f93bf508ef860008fcb6b4d7fa3dcb00b7741779bd8212bef6b3369dd12a7cc69600a495efa9b581aeeaac4d371cb44c4c8aa66b7720da086528a0bbbbcb9073e89563bcdddbcedd38605397e", 0x79}, {&(0x7f0000003140)="0777d7d7b8fd1625e6c4f37c032a783397c6c29f628f5c7359b687f50e7749e852e4b1616894a99a863ab69ecb321761db0bdf7c6556bb17947d8a4896dcfa3ea8f60bb4a41ff6eb76ff5e5b132c24bfc9", 0x51}], 0x5, &(0x7f0000003240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x50}}, {{&(0x7f00000032c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000034c0)=[{&(0x7f0000003300)="6643f0965d3d12546930f68840d5beabbf3df491fb063c97b2b61cf84766fe54c4070c9339e6", 0x26}, {&(0x7f0000003340)="92f469a9ce75ec6a1d335c73de648b324622ecd2923e1e5a08c6640f41202268f2ac3d0f6ec0f9a26f4ab5a60e04f9c751c4f06f87c26f3ea1b0318836d91d37b7c4846bd4eb9c105311467ef03cd953dbe831897cc855f28ef199e8dd606f650f827009d79d25e9768c8c71168aee46aa33b95e86d540f6226129120f5532c51aa1a6c6262e8e1b8d2fffbc0d4754eb11574024696495bf94a9f6524548ebb22295905e89d338a5673085806920b96e080a4b094d751a095ac79df05a3a8d6b9bf2984d4c51dc7c599ceee2a547afcd08e11d90fe", 0xd5}, {&(0x7f0000003440)="37274d6e70aaf93b2cb8fafb21cf650be572c341a8a84a91d72394e4e6d0ada6a2fc3c7794060d9a5c98d4f242aaa55322b5d24c7ec4c90a87fe8471c091cf9bd20aeb8ff7f212985384a1471eb477ab5e404b4d68d604c5430bdaeb897854331e", 0x61}], 0x3, &(0x7f0000003600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x85}}], 0x70}}, {{&(0x7f0000003680)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f00000037c0)=[{&(0x7f00000036c0)="a1650480b8e7b1841ac68a75ef29d8c8713e5311d4553b6a4a3bda52cd1fb387d6e21692176698e6d68b872261ceb5fcb40bfbf8441bbb9bf59e8860bc3f34bccc4bb0aa35379128b099aefeb4f13ec947", 0x51}, {&(0x7f0000003740)="2d592341a49502dfd12f736b4289f824595b13a58a3752763c80187a653d0e2ff764c97d582cfd2558c5f6f8532a67737916e691c90d06c5d4bbee5a03841b861722718c80c586adf4197ec38e4a3e3cc9edf3ad029272c6a01bdff624", 0x5d}], 0x2, &(0x7f00000038c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xa263}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1}}}], 0x58}}], 0x3, 0x20000800) dup3(r5, r6, 0x0) fcntl$dupfd(r2, 0x406, r5) socket$inet6_udp(0xa, 0x2, 0x0) 08:43:45 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x401870c8, 0x6) 08:43:45 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:43:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x5000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:43:45 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:43:45 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:43:45 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0x4}, {0x6}]}) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) [ 1688.872319] audit: type=1326 audit(1755420225.642:23): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13747 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56031a4b19 code=0x0 [ 1689.694857] audit: type=1326 audit(1755420226.464:24): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13747 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56031a4b19 code=0x0 08:43:56 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:43:56 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer0\x00'}) 08:43:56 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:43:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x6000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:43:56 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "000002", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:43:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000000)="2b4577e365ac8b006c66a4373efe3520ab850d104e2e6d1b355181266bee987c0a6f80e4ba5acafefd9a4d5ebf0c17ec7202756e8f4275881130de6b55a076ea5c31e8a8eaa7cd2dcfb566c4c66901feedfad12cab580aba3b344725822cc9079c0a01027f") r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r3, 0xffffffffffffffff, 0x0) dup3(r2, r3, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004, 0x10, r3, 0x71d46000) 08:43:56 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x401870cb, 0x6) 08:43:56 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0xf0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:43:56 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x11d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:43:56 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:43:56 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "80ffff", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:43:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x7000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:43:56 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r1, r2, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000280)=""/65) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000200)={{0x2, 0x2, 0x7fffffff, 0x1, 0xffffffff}, 0x8, 0x8}) 08:43:56 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:44:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:44:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x300, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:44:05 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:44:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) write$bt_hci(r0, &(0x7f0000000000)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc9}}}, 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) renameat(0xffffffffffffffff, 0x0, r1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:44:05 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:44:05 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x401870cc, 0x6) 08:44:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x9000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:44:05 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "97ffff", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:44:05 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:44:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r5, 0x1, 0x0, 0x0, {0x19}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x2f, 0x40, 0x0, 0x2, 0x6c, @local, @mcast2, 0x7800, 0x7800, 0x1ff, 0x400}}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000400)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)={0x68, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000801}, 0x4048019) 08:44:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0x0, 0x5c71b038}) 08:44:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x500, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:44:05 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:44:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0xf000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:44:05 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:44:05 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x401c5820, 0x6) 08:44:05 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f4ffff", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:44:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = dup3(r0, r0, 0x0) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x1, [0x1, 0xffff], 0x5}, 0x10) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000a40)=0x40) socket$inet6_udp(0xa, 0x2, 0x0) 08:44:06 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:44:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x17020000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:44:06 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4020940d, 0x6) 08:44:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x2) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) sendfile(r3, r2, &(0x7f0000000040)=0x5, 0xfffffffffffffff8) 08:44:06 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:44:06 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f5ffff", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:44:06 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:44:14 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:44:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:44:14 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x600, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:44:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x9effffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:44:14 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:44:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x10) r2 = dup3(r0, r1, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x6aafaff8}}, './file0\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140), 0x6) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r6 = dup3(r4, r5, 0x0) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000140), 0x6) creat(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="140019edffffff800000ed16ad64ef5f19ffb25b83e66a013d0ec451c43f82fc485d9a9e63b14d508075f77a5e92e5465510a7bd3090fb9ed880ed3343c7d566"], 0x14}}, 0x0) renameat(r6, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x511000, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:44:14 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x80041284, 0x6) 08:44:14 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='auxv\x00') ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:44:24 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:44:24 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x0, 0x417, 0x8, 0x0, 0x2}) r1 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x4, 0x401) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) 08:44:24 executing program 1: ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/205) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:44:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x700, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:44:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0xf0ffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:44:24 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:44:24 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:44:24 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x80041285, 0x6) 08:44:24 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:44:24 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x8, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000180)={0x3, r1}) 08:44:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x900, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:44:24 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs(r3, &(0x7f0000000040)='net/protocols\x00') 08:44:24 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:44:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0xfffff000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:44:24 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x80081270, 0x6) 08:44:24 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:44:33 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0xffffffff, 'id1\x00', 'timer1\x00'}) 08:44:33 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:44:33 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:44:33 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:44:33 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x80081272, 0x6) 08:44:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0xffffff7f, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:44:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:44:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0xf00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:44:33 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:44:33 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x80081280, 0x6) 08:44:33 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x6, 0x6, 0x54, 0x0, 0x3, 0x11530, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}, 0x100, 0x100, 0x8, 0x3, 0x1, 0x869, 0x3, 0x0, 0x0, 0x0, 0x67}, 0xffffffffffffffff, 0x1, r0, 0x8) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000140)={{0x1, 0x1, 0x9, 0x3, 0x7}, 0x800, 0x3}) 08:44:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x1d01, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:44:33 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:44:33 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:44:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:44:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0xffffff9e, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:44:33 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:44:33 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000140)={{0xffffffffffffffff, 0x3, 0x2, 0x0, 0x1}}) 08:44:33 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") [ 1740.134290] Bluetooth: hci4: command 0x0406 tx timeout 08:44:45 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:44:45 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x80086601, 0x6) 08:44:45 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:44:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0xf000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:44:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:44:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0xe}, 0x6) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:44:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0xfffffff0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:44:45 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:44:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:44:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:44:55 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x80087601, 0x6) 08:44:55 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0x0, 0x6}) 08:44:55 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:44:55 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:44:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x30000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:44:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) write$bt_hci(0xffffffffffffffff, &(0x7f00000002c0)={0x1, @set_reserved_lt_addr={{0xc74, 0x1}}}, 0x5) dup3(r2, r4, 0x0) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) dup3(r0, r1, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x200}}, './file0\x00'}) getsockopt$bt_hci(r6, 0x0, 0x3, &(0x7f0000000400)=""/211, &(0x7f0000000280)=0xd3) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4000) sendmsg$IPVS_CMD_ZERO(r7, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x64, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9ca3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4014) 08:44:55 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:44:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x80000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:44:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:44:55 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:44:55 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_udp(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={0x0, @qipcrtr={0x2a, 0x2, 0x7fff}, @vsock={0x28, 0x0, 0xffffffff}, @ethernet={0x1, @local}, 0x7, 0x0, 0x0, 0x0, 0x800, &(0x7f0000000180)='ipvlan0\x00', 0x3, 0x5, 0x8}) close_range(r1, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) dup3(r3, r4, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, &(0x7f0000000240)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, 0xffffffffffffffff}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:44:55 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x80111500, 0x6) 08:44:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:44:55 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:44:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x80000001}}, './file0\x00'}) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f0000000040)) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:44:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0xf0ffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:44:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:44:55 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:44:55 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:44:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:44:55 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:44:55 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x801c581f, 0x6) 08:45:06 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x80811501, 0x6) 08:45:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x2, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:45:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:45:06 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:45:06 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:45:06 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:45:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x100, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext, 0x0, 0x4, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:45:06 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0xf, r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000002c0)='encrypted\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000003c0)="d4b17750a4a679caecafa2b8be11d3a8999c9139977b49634ef5e0a89309dc5e7a6ecae75e8658524a42b39f9f83c94ab2d360a28fba43fd72005a0c6bd4fdf254fac8c205e2c4ac612abf937bd2f025e0d3955d215961502505e808f76feb0a41701e5bdb0e55e05babce338c0d1bcbf693eddc3765751fc8f19ec7df8352fd72c91df707d46b575b81b9f32bc599194c594f034f518a901552ed2007f8567885545c4a403e45ba537786ed56d3db408de35c", 0xb3, 0xfffffffffffffff9) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:45:06 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:45:06 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0xc0045878, 0x6) 08:45:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:45:06 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x58cb5267f96f2968) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xc0, 0x6, 0x9, 0x3, 0x0, 0x3, 0x200, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x801a}, 0x8, 0x2, 0x4, 0x0, 0xac, 0xff, 0x5d52, 0x0, 0x4, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000140)={{0x2, 0x3, 0x803}, 0x0, 0x0, 'id1\x00', 'timer0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x40701, 0x0) fcntl$setflags(r2, 0x2, 0x0) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x1) dup3(r1, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000040)={0x1, 0x3ff, 0x4, 0x0, 0x2}) 08:45:06 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:45:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:45:06 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:45:16 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(0x0, 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:45:16 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x60) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:45:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r4, 0x0) write$binfmt_script(r4, &(0x7f0000000840)={'#! ', './file0', [{0x20, '/(@/%*\\'}, {0x20, '\xff\xff'}, {0x20, '\xff\xff'}, {0x20, ']&%'}, {0x20, '^'}, {0x20, '0.$:}'}]}, 0x25) sendmsg$inet6(r0, &(0x7f0000000300)={&(0x7f0000000180)={0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000001c0)="928d6e72fc254dff41c87dbef8c6ee45ef2f1bc78da42e74a40f5afefd5e2b6652", 0x21}, {&(0x7f0000000200)="28327c88062c53e97c1e40af8d3d90e5684310cf3b196f8402d856d25a2a9f97bbc33ce98957089598e357545b83", 0x2e}, {&(0x7f0000000240)="1c18c7ec9981cb7e3e5b3bf99d00c947b415ef", 0x13}, {&(0x7f0000000280)="8b6172ba459ed078b65cdf9213808639a1e1f57d2eb3c4f6e377520877b60008b16636fef4818f9089b6fdaa5e20ec43d4af3a8d1324be1321dacaf31ab3dad1592ef0ceaa678ab9d900b3496550ad840ece8415993c5f55cea9af1574e472a280da00c737f926", 0x67}, {&(0x7f00000003c0)="80eebf76e488aea1d578584de03b4e910644e889b935382eb2345bad354a7cf8e168230ef16cc534906aa0a311c98cb2830b7ab6ff7c9a83ce6551d420226d7fde89224adf104efb6bc3eace9b018029d2873fecad2b4164a72a34af5cda463bf1d03189668e8baf78572937a6", 0x6d}, {&(0x7f0000000440)="798a3d337e8ad69ab0d6c0e8719ebbc443e79b2ae5f6a8f2145e28f3feecf0ddad3de963cfd060a19df4cb360af54a3c36826e8dde2028ad74c1cc2b6853ce719885266b639bef6679410e5e8f927c8f4289d33cda50b2b348cebf6506d841083383ffb191b45e85ba8b5f4f3ab86e0ac5cd558f3b8795c85079149258f59e61df7a238983ae8ca5ec1a42bc14ecb20825f8716a980a0d4500cbe3ddd24efc4f6f5d2f1d1e405f1ef88b42298089506ee93fcbd43490d56e9d738cc34b61489cabe2a203ed5a3d9be8777c6ce618cba55ae95c7cb16d121821989ebf503209764aff95198ddf87", 0xe7}, {&(0x7f0000000540)="bb46694a5c5ef76940ea440740c0c6f59f9de981b2f03650b3327100c28f6f537b2045556432e636f28f33099ca1bad2684d57e39be012432964a8a4ee6fe1594d580fc67a950b22e1f9bdcdcebecd0446c5a6391d7cb9be899be0c89d46ee244f09bb4ebc128167c140dae79dc7bd4c9b39fd264e40cc2c132b4570e9950a9d29433f62ec5d20fa6f99325c329ce0f684fc5004ff221fb5d1f2f7c6e907829517e40b0e517df3f2faa9c3249082221bce07b2f86405109dae7173497143", 0xbe}], 0x7, &(0x7f0000000680)=[@hopopts={{0x30, 0x29, 0x36, {0x87, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}}}, @hopopts_2292={{0x48, 0x29, 0x36, {0x32, 0x5, '\x00', [@pad1, @jumbo, @calipso={0x7, 0x20, {0x1, 0x6, 0xfa, 0x5, [0x6, 0x81, 0x1]}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r3}}}, @tclass={{0x14, 0x29, 0x43, 0x1f}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x73, 0xc, 0x0, 0x0, 0x0, [@remote, @local, @empty, @remote, @ipv4={'\x00', '\xff\xff', @local}, @mcast2]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xf815}}, @tclass={{0x14, 0x29, 0x43, 0x5}}], 0x160}, 0x1404a0c4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r5, 0xffffffffffffffff, 0x0) dup3(r0, r5, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000140)=0x8) r6 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000800), 0x400000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000900)={'ip6_vti0\x00', r3, 0x4, 0x4, 0x40, 0x2, 0x2d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x10, 0x80, 0x100, 0x40}}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) fcntl$setflags(r6, 0x2, 0x0) 08:45:16 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0xc0045878, 0x6) 08:45:16 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:45:16 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x3000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:45:16 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:45:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:45:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:45:17 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:45:17 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(0x0, 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:45:26 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:45:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x5, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:45:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x5000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:45:26 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(0x0, 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:45:26 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x21, 0xaa, 0x2, 0x0, 0x0, 0x100, 0x1410a, 0xc, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x1, 0x1, 0x1, 0x0, 0xd31, 0xea3, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0xb, r0, 0xa) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x1}, 0x40000ffd, 0x2, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x0, 0x80000001}) 08:45:26 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:45:26 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0xc0101282, 0x6) 08:45:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x4001, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:45:26 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x1, 0x0, 0x0, 0x0, 0x0, 0x90080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x37, 0x9, 0x2, 0x8, 0xb80, 0x3, 0x6, 0x1, 0xe0, 0x40, 0x2cf, 0x3, 0x80, 0x38, 0x1, 0x81, 0x4d4f, 0x1}, [{0x0, 0x8, 0x5, 0x8, 0x0, 0x7, 0x200, 0x3}], "b03513b16474945c53b87c1c8a4a06632472a42de2e0ab8adb31eb5216a9778cb86e1ac9feae5f106ea526a737169146467fdb2fefff2241c7275ecbf7b9c67cfeea9855f78b7b8e114f9711b1aab24c90dffd329349614a6ee60b15293164852c80d7f1d4e9b91a863cfc66a9bf27f9c538ff827ec7b6ffd9255f721ba169ee2ed9fa3d6ca2e38ffc1249000233ecb263e053f7c4e0343ad02087c1008df314", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x918) 08:45:26 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:45:26 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0xc0189436, 0x6) 08:45:26 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:45:26 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(0x0, 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:45:26 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:45:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x6, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:45:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x6000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:45:26 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = getpgid(0x0) fcntl$lock(r0, 0x25, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r1}) r2 = fork() kcmp(r1, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffb291, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x41480, 0x400000000000}, r2, 0x400, 0xffffffffffffffff, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:45:26 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0xc020660b, 0x6) 08:45:26 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000000)="57f987b951f35be8e078d2e6309266db763314763071e53d92f331724401a2637811d949e6368babaa425a1965a82dd6a0af6a6b9ae933fd73733091a126fae4cddf80fc46356673a02dff38f92720fce340cc894316c911d8751e4af1ccba5884c025f5c46f35b207622ad96bd04d42686ca9b7dfb24c91be9161fd4555acfe2b6ac798bbee6a9055d08a229c79b69ddcb21ab72013d7c1b47676f3d09c5822957ba6c1283026dc9d9dd14b0906a6994c79f1ad806430c2a58378ca3f010cd50a44f6b5d48c265b77d1f285256a5db5454cfa67afe136cffc23f0619192ba313eb6d0ca24eb018f0e8af6408ad7291f56127e7c7c") bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:45:26 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:45:35 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:45:35 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(0x0, 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:45:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x7, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:45:35 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0xc030128a, 0x6) 08:45:35 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:45:35 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x7000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:45:35 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x5}, 0x2892, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r5, 0xffffffffffffffff, 0x0) dup3(r4, r5, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0x72c, 0x8}, {0x1, 0x8}]}, 0x18, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r6, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x9ab, 0x4, 0x7, 0x101, 0x7}) 08:45:35 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000180)={0x3, 0x80, 0x0, 0x9, 0xff, 0xff, 0x0, 0x40, 0x80280, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x10, 0x3, 0x1, 0x6, 0x5dd0, 0x6, 0x4, 0x0, 0x1, 0x0, 0x100}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x20, 0x0, 0xfffffffffffffffc}) 08:45:35 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0xc0401289, 0x6) 08:45:35 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x9000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:45:35 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(0x0, 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:45:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:45:35 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:45:35 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:45:35 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7c4666d7035828c4690bca329e3b"], 0x52) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) pipe(0x0) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="83c83a6b74fdd7dae2560f0d6bcdf401a18cd7c34fe78840d0fc0c8caf2d9c8ca8a0660dfe470ef95d8b826bd20b9e8964f2d9accde1c4ccb2ae12f8d216fb557fb089895e36e249d8a911a03b9fba14b9f7c96ac9bac4c77b61548de778561c9d689fff679fa3dcebe10dcc9dfba5804ba9df092e8d9de7b761192cf50000"], 0x7) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r0, r2, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r4, 0x400448e2, &(0x7f0000000540)="74e2ce96780467d9defd9af315be95ed34910e010e0da5f9f140053a74337b6f8538c58edf9f8b391b92be6be1e55841b27ceb1cca98599d63b38b268bf13e4637fcf0c673d1e98a5f2736d7c36b93fb7d2f0946ba8515474f3da2350293da1381b5b5404bc8682447eba6e7b47b1df7d0cc") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000a40)) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000000906030000000000000000000500000605000100070000000900020073797a31000000000900020073797a3000000000040007805400078008000b4000000006060004404e2200000c001b400000000000007fff0c001940000000000000000114001700677265346170300000000000000000000900120073797a450000000008000b40000000013400078006001a0023000000140017006970366772653000000000000000000005001a00000000000a001100ffffffffffff000005000100070000000900020073797a3200000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) socket$inet6_udp(0xa, 0x2, 0x0) chmod(&(0x7f00000005c0)='./file0\x00', 0x50) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000600)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000080000000f74d42bd83569a390e5f7450808471192507351381c0aa087d07954ebc104a7b1722f49be52658e1c6d95ab4047acf60c65d7ec14814fcab1b68653b951450b784b9ca7c45d0112dd73a2ff30e369de0213170c4b401cfd8ab560855690bd5d3ba72ccfd6e316076f6ade9da9fd4b00633196ab02aaf3547c9e68f0bc8a00d3f000000b3aa6f56c23975"], &(0x7f0000000240)=0xa4) socket$nl_generic(0x10, 0x3, 0x10) 08:45:44 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:45:44 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0xc040128b, 0x6) 08:45:44 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r1 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="d37212551a8fcf8b66eddca7bf2663591bda7d7d0f9698b9f2e2ff48f72a53eab1728da6df8678389de263cffcd4c40a9e03919bac4e73ae69fd195164e4055255bb3bbc3dc0c5c49ad7e1c5f137dc81b7b594e1e20a0c17f34fedc0656ad3328bccce212fcde2dafc656bc7100f2ebf5941b31cd10dc40b1818ddf690f71aa30ba5d8c9964b61ebc6ea20e10de9e5c43fa5ffcd17d1d6b9b6be7b19c59f15dd640c92f2830b5d78f4fa742034673a6c5080cb24a233ae2715b8b93ba2a14c35ba64db1f34fd6ce994c105f10aadc0ca0bb6808ecb188873cd8f06c19767b5904d57612d", 0xe4, 0xfffffffffffffffc}], 0x1028, &(0x7f0000000500)={[{@nodots}, {@nodots}, {@dots}, {@fat=@errors_remount}, {@nodots}, {@fat=@dos1xfloppy}, {@dots}, {@fat=@nocase}, {@dots}, {@fat=@errors_continue}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/timer\x00'}}, {@fowner_lt={'fowner<', 0xee01}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x66, 0x61, 0x6d, 0x38, 0x34, 0x36, 0x30], 0x2d, [0x61, 0x33, 0x31, 0x66], 0x2d, [0x62, 0x65, 0x30, 0x66], 0x2d, [0x36, 0x66, 0x61, 0x31], 0x2d, [0x66, 0x38, 0x37, 0x106fa7822bef1666, 0x61, 0x36, 0x66, 0x63]}}}, {@uid_gt={'uid>', 0xee01}}, {@smackfsroot={'smackfsroot', 0x3d, 'timer1\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x66, 0x34, 0x34, 0x34, 0x32, 0x64, 0x31], 0x2d, [0x37, 0x39, 0x62, 0x66], 0x2d, [0x61, 0x62, 0x33, 0x59], 0x2d, [0x63, 0x35, 0x39, 0x32], 0x2d, [0x61, 0x33, 0x34, 0x63, 0x32, 0x38, 0x62, 0x32]}}}, {@context={'context', 0x3d, 'user_u'}}, {@measure}, {@subj_user={'subj_user', 0x3d, 'id1\x00'}}, {@permit_directio}]}) close(r1) statx(r1, &(0x7f0000000400)='./file0\x00', 0x800, 0x40, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) dup3(r3, r4, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x3}, [{0x2, 0x4}], {}, [{0x8, 0x4, r2}, {0x8, 0x7, 0xffffffffffffffff}], {0x10, 0x4}, {0x20, 0x2}}, 0x3c, 0x0) 08:45:44 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:45:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0xf000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:45:44 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)="0161dc989fc4753ad1165a91308b4bbf0c9480f6652be17a3895b5e32ff214649c481c056e42c089ab8d5983a599b98538e71d93ce6a4fcfb65dfd7b364d621175ac5e33f818b705f6ebb89cc5f94504c31eec52f09abc4b277af04cc6fa74d958e85d4f76424cd8d2e3b50b83466ab70f2474bf2c9c55b2bc88368fc4cd3bf9507f70dc936258722a1a1c6c4923ba52c373931045d8983147e5a7922ad73898facb4c9b065d3e293b4a38af6ea76be77e6bab26ff6feacd70f4b1a52591ba47b69a3fa54024") bind$bt_hci(r0, &(0x7f0000000140), 0x6) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) bind$bt_hci(r1, &(0x7f0000000100), 0x6) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000180)="039667f1c6fc3bf20182b9612c81f17dd583957c60ac6737c23ab1eac2ff688dc93e3620744d091190e5af520e585bcf5eeca16cb7383fafe7c1c57c8b0473a99b6f802c092f0577ecf2da90115fbdb68a4f114f0f631c569eabe4be058725") socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="14230600"/24], 0x14}}, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000002c0)=0x2, 0x4) write$bt_hci(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="01162002c9002c8ccc462b8c509ea730177caaf7eb4084b67d32b8"], 0x6) 08:45:44 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:45:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x9, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) [ 1808.083102] loop5: detected capacity change from 0 to 16383 08:45:44 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:45:44 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:45:44 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:45:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0xf, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:45:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x1d010000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:45:44 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0xc0481273, 0x6) 08:45:44 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000180)=0x280000000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140), 0x6) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r5 = dup3(r3, r4, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) ioctl$int_out(r2, 0x2, &(0x7f0000000140)) 08:45:44 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:45:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:45:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0xf0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:45:54 executing program 5: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:45:54 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:45:54 executing program 3: ptrace$setregset(0x4205, 0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000040)="adc707557b2e86ff42212874ceaac578b25b723c842dbc393c850124139b423727a91038fbf63e671c52aba6d4968aaa900e5b5f52d23959fe740b1bedbbdde0c5b97a0da427d92f", 0x48}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44810517e8abfedcae923799a785ddec8abc18eda60b0c1b77808d0b5ff608df1fbd010000002719aa1fc23691ff36eda200000000e8139536dc8ac6c601000000ab31d51bc45dfcbf72", @ANYRES16=0x0, @ANYBLOB="000209000000ffdbdf252500000008002c000001000006000400ffff00000c0005000201aaaaaaaaaaaa0c00050000000000000000000500290000000000"], 0x44}, 0x1, 0x0, 0x0, 0x24040084}, 0x20000040) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) 08:45:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x9effffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:45:54 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:45:54 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000180), 0x2, 0x101040) ioctl$sock_bt_hci(r5, 0x400448cc, &(0x7f0000000400)="73a8ad473cff113432fb9e7d44b4b5463011dd7e5e7caaed31361efaffdeb16e26fd6dfa74dd778c361ef92db9da91f24d372c1649be78af6b87190fb2cc61d24d7cddbfb59bd628d3af2376e45dd3045b7abdbc43b6621bf146bc2c524116bc8ecc4e844841228e886563ca262d458c6275a350bd3212a8faab646de5e2247051c5aa32eb6ec78f71c1cc6f2a39789eef49a025d210c1510b11d7076267a6092f562b1b5316a45e9f700dc611937239efaa5f74341fd6a373fe5450bc5448d77fefeec4c2e3fb1407f6a0aa6fa7d5d336eabe941bf61aaf816230eb7da551ad86e25a51175d836038ed3ae0772d6988804b43189fe6") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0xb578f82228e95953, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x42}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) socket$inet6_udp(0xa, 0x2, 0x0) 08:45:54 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:45:54 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:45:54 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:45:54 executing program 1: ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)={0xfad4, 0x80000000}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0xf2) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) openat(r4, &(0x7f0000000080)='./file0\x00', 0x8600, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) 08:45:54 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r2 = getpgid(0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r2}) r3 = fork() kcmp(r2, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000a00)={0x0, 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = getpgid(0x0) fcntl$lock(r5, 0x25, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r6}) r7 = fork() kcmp(r6, r7, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000a80)={0x20000000, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880), {0x3}, &(0x7f00000008c0)=""/85, 0x55, &(0x7f0000000940)=""/154, &(0x7f0000000a40)=[0x0, 0xffffffffffffffff, 0x0, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6], 0x9}, 0x58) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000140)={0x1, 0x7f, 0xe3, 0x0, 0xc}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r8, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/125, 0x7d}, {&(0x7f0000000440)=""/193, 0xc1}, {&(0x7f0000000540)=""/233, 0xe9}], 0x3, &(0x7f0000000680)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x40000140) fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000780)={{}, {0x1, 0x6}, [{0x2, 0x3, r8}, {}, {0x2, 0x2}], {}, [{0x8, 0x0, r9}], {0x10, 0x1}, {0x20, 0x1}}, 0x44, 0x1) 08:45:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0xf0ffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:45:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x217, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:45:54 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:46:05 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:46:05 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000040)=0x3) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/llc/core\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x1) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x4040) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x40000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0), 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x64, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x20000880) r4 = getpgid(0xffffffffffffffff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000140), 0x6) r6 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r7 = dup3(r5, r6, 0x0) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x124, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4036}, 0x4000010) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x1, 0x3, 0xfffffffffffffffe}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 08:46:05 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "000200", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:46:05 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:46:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r1, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x7, 0x3}, 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000000080)) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:46:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0xfffff000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:46:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x300, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:46:05 executing program 5: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)={0x0}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000003c0)={{r0, 0x6, 0x1f, 0x8, 0x10000, 0x9, 0x2, 0x1, 0x10000, 0x8, 0x1, 0x2, 0x8000, 0x1, 0x7fff}}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000013c0)={{r3, 0x4, 0xffffffffffffffe1, 0x0, 0x2, 0x1, 0x5, 0x8, 0x8, 0xe13, 0x4, 0x8, 0x36b, 0x39, 0x3}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r5, 0xffffffffffffffff, 0x0) dup3(r4, r5, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f00000023c0)={{r0, 0x7fffffff, 0x289ad886, 0xb82, 0x3, 0x9, 0x7, 0x2, 0x2, 0x2, 0x8, 0x8001, 0x2, 0x3, 0x3}}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:46:05 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x0, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:46:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x8}, 0x10008, 0x0, 0x8001, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x4, &(0x7f0000000140)="e25f80577853d382c9f4d672a78b9a8e57ad2da56155985596bfa025c5e656eab22479a653ff8b8305a1e761ee71ff721d38d0d3effdde3bc3992783ec11510130a74d94474c6f01d95e89aa241c7231762edf828376e220b73dcfab14efc98fac4409a0e72867803b2aa3928f3b63f8435deba2bc7aba6447d737b6") 08:46:05 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x0, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:46:05 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "000300", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:46:17 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "000400", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:46:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x500, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:46:17 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x40040, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x50, 0x3, 0x2, 0x0, 0x0, 0x5, 0x2805, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x6, 0x9}, 0x400, 0xb95, 0x6, 0x3, 0x80, 0x8000, 0xfff8, 0x0, 0x2, 0x0, 0x10001}, r1, 0x9, r2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x6) 08:46:17 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:46:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r3, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r3, 0x0) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x0) r4 = getpgid(0x0) fcntl$lock(r2, 0x25, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r4}) r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x72d, 0x100000000}, 0x0, 0x0, 0x20, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2}, r5, 0x0, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r6, &(0x7f0000000000)={0x1, @remote_name_req_cancel={{0x41a, 0x6}}}, 0xa) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:46:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0xffffff7f, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:46:17 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x0, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515ce99c0756c6f9b3b6ea7a7a01aedbc7c862ff8b222c4c6b0acedac2858d74c56914752143ed2ea753a51f19967b998e68adab4d18a0") 08:46:17 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = getpgid(0x0) fcntl$lock(r1, 0x25, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r2}) r3 = fork() kcmp(r2, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) getpgrp(r2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00ae324489b92424006941653000003700000000000054ebb9b582f9d6fb055a9bd4ded89fd66a9dc3343f362e23ec9ebe3868adf717650ba8851fd79f8f795a2c4f512519651f7bfbaaaaf98c3ec17a104fb721df942e7031ad98efbe397785160df9ab47e8477ff0ef8614fd38641a77fdfb3a"]) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x2, 0x6, 0x8, 0x93, 0x0, 0xff, 0x891, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x3, @perf_bp={&(0x7f0000000140), 0x6}, 0x2200, 0x3ff, 0x6, 0x4, 0x0, 0x200, 0x2, 0x0, 0x800, 0x0, 0x3}, r3, 0xe, r4, 0x8) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:46:17 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "000500", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:46:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x600, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:46:17 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:46:17 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) syz_open_dev$loop(&(0x7f00000000c0), 0x1, 0x208000) r1 = syz_io_uring_complete(0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x9, 0x6, 0x1a, 0x1c, "023bcc88f8bdbdc28c25c411bf44f3aafa6efc1234c9324585978c6b60a41c1d778ad1c7302382147b7d0add3b4c61e8ad9da574d2026976ac31d196035920a7", "f5e6df0a7e299037bd271edda052af0aa9d0ab2ca7101ebc55022ec9ff3b3ad8", [0x5, 0xd6]}) 08:46:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0xffffff9e, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:46:17 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, 0x0) 08:46:17 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "000600", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:46:17 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x0, 0xfffffffd}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x9}) 08:46:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0xfffffff0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:46:17 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:46:27 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, 0x0) 08:46:27 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:46:27 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00\b\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:46:27 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:46:27 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r3, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x55}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x880) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f0000000180)) r4 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r4, 0x80000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r6, 0xffffffffffffffff, 0x0) dup3(r5, r6, 0x0) fcntl$getown(r5, 0x9) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG(r8, 0x50009402, 0x0) splice(0xffffffffffffffff, &(0x7f0000000400)=0xff, 0xffffffffffffffff, &(0x7f0000000440)=0x4, 0x68, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000040)={{0x0, 0x1}, 0x0, 0x1, 'id1\x00', 'timer0\x00', 0x0, 0x2, 0xec, 0xffffffffffffffff, 0xfffffffd}) 08:46:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x700, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:46:27 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000300)) dup3(r1, r2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x0, &(0x7f00000001c0)={0x4, {{0xa, 0x4e22, 0x422, @private0, 0x7fffffff}}, {{0xa, 0x4e21, 0x6, @remote, 0x37}}}, 0x108) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r6, 0xffffffffffffffff, 0x0) dup3(r5, r6, 0x0) connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e21, 0x800, @empty, 0x4}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) dup3(r3, r4, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x0, 0xff, 0xa0000000, 0x30, @rand_addr=' \x01\x00', @loopback, 0x80, 0x10, 0x5, 0x3ff}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYBLOB="92ad0000000000000000000000000000010000800000000007000000000000000900000000000000ff030000000000008000000000020000000000040080000009000000000000000900000000000000faffffffffff838208000000000000005000"/184]) 08:46:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) r5 = dup3(0xffffffffffffffff, r4, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setresuid(0x0, r6, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0xa0840, 0x0) getresgid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYBLOB="ff03004001000000bf2c08d1213a2600", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r8, @ANYBLOB='./file0\x00']) fstat(r0, &(0x7f0000006e80)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r1, &(0x7f0000006f00)='./file0\x00', 0x2000, 0x20, &(0x7f0000006f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000007040), 0x402000, 0x0) sendmmsg$unix(r1, &(0x7f00000071c0)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000000080)="8b65d1f51dfe198677de2ad62685de0f5f3b0dc51c8be757ca41d7f7d80f62bc34289e584bcb9c666df155e8b4dc71b3ca8937a24ffdfb25aa2e1260929ed983887da8bc0cc476db807aeb9f7244e00d92b45b30ff7e4362e89448471c786af9f2fcb7141111386492010c23cf092c5ada885cc28d5415126a6b4d988c0d1e813989d5d1309e182ff0fea3c464618a77e3775fc8d08744bf93146302360eff420c70", 0xa2}, {&(0x7f0000000180)="42e85136a448200da7b2464c8c3888ca352e19309e4aed9ecc92c05b76b22d23dc3dee4432c01c76cec58c1908a1abab8ad6e4f8706fcd2994f759028a64ad1d1de839105251de5886ee504149ff00fd4cadc79777058ba90a927ddf0e0018f983e987df82f8305cab9632becffc0f27074825d6de69820a5cfc18a9", 0x7c}, {&(0x7f0000000200)="934ab764315815572d01987f4420935fc0ecc1175a21eb46d11a5f773a1b1e2004d895a186a940cdf61e8522b8629523f1115fbfaa542fb3881c75963c7005adece8725eac0c7f710b2ed1960dd440f31adac198615962c40fd6d1e5a46931157af2d3adf1522b7a97c463ad918719d18e2cd0592c93847afc93f97fcff8d11b6d11ab20e0e798887d62cb3c81eb51a237d0dffa6fce2ada63cbb9b93604445da100d331fd9fc6807cbd025d35c6c3689f55e464875a2e33a00b69a77b3c4e5b4a906f208eb6c3fa1a5d96c0cb1657e692c2e06e8311abaaa6d09826242ef30604292aa898a749cb08f0afcdc1da", 0xee}, {&(0x7f0000000300)="19f2e168b290670e0c6e99e628d89867848e7d8101891f361eb053902babc9a7b6b8f973c57d32a333901e756470876d785804da504b5b23e40fd7350e05bb45", 0x40}, {&(0x7f00000003c0)="51571ae2f101c111878a57b2220b98d69dd52a5539672bd4d14a362139d33f3da0840357806eeb06beac2d8bbfb6402e89b74216a180899c6edc0b811275187edb03b3bd187048eb2b39432595040750d31732f7bedda18c342a28d19ab07394b4282eb500e85cbd3938ff62b3703571fc7bf1f9e48f25934192c6d1b1b6123d9d4b38538d9b3e3be60a97f406b785d4632b1e92952b834c1fdb051fe38e4f0335f1b9fa0819a0a2308557d4297a131713cb32b8525816e4", 0xb8}, {&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000000480)="cd70320c6543c6771b77224d31e9c4a8ce579e409970572afe29f8ddc5768823278425c45fd71bc9ff62911f6d41835db689f232af7fb350fc7f024488f6c1286229c6622230b9af933b83b72c24f528af96492602fa33a1faeaed1da8a7fa603e9604d6f58ef6ebed1622ffb90957ab0b953614ec0475017591e062a99effb5b923e29c20498cfc8418104178871cf46eccabef5a12b97b4be1d9d0055240ccacd5eb4e4d70f61618e5c491872c7622dff73e91f757d316a954abd6721f575dc114809c95469c4a6764ee19d6e6c372bda010ba32baa4210291d97eb2418063bfa74f20cd", 0xe5}, {&(0x7f0000002a80)="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", 0x1000}], 0x9, &(0x7f0000000680)=[@rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, r5, r1, 0xffffffffffffffff, r11, r5]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, 0xffffffffffffffff]}}], 0x150, 0x100}}, {{&(0x7f00000051c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000005300)=[{&(0x7f0000005240)="f39e884103c66053fa87f77e2fe779573d32cdd812204348616ed6daa07d3f088acb131220ec8dcd416865b1cb1ffc667d262edf518900186a9e122e0af60c6c896d3d820127595e9b617ed2c1dfce6e115a7b646739571ec7605780e8889d69b4d360e3f4a3ff4d514548eef7284881b786d8077bbc042ee684ba626c2d1a695c58496715c1ba7ade19a7e6364855bafd3b3074133687836a82d8257a68f2923fa9fdaf2c64924110dd1809eda3ae", 0xaf}], 0x1, &(0x7f0000005340)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0]}}], 0x30, 0xa4}}, {{&(0x7f0000005380)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000006800)=[{&(0x7f0000005400)="2bfae3fda917fd3539691e4ff9f88714286ee62765d8d4a495c1847ba3b79c77fa9f6adb4eaf91e28ab6548fe58c486bc6350640cc2403e00b58f4ed523dc2f57168cf1f8fe701340deaee54fd3487e23d75508040c801176169ba269ea3ca7a40d47b3a9cc8bead67a8dcbb92e7ce4de0518a70bcc8769899cbee15c18113d893869251384597e732a675ae4770e95088a5a69182f3174511f3b71fd1d301d3c242679a2474b5f62b02c75904b8ee3793971f3f4422bf7eef6834", 0xbb}, {&(0x7f00000054c0)}, {&(0x7f0000005500)="ade2f379176c185639d3aa79fe405dc404a2ff22f179961fba1a357e3f857677b5470b651a170fd9b2a92bd30e35432c2c4e1014cdb333c084c4ee40f114aab91e089c014e94bb2d1b8bd6d5f737c16d4d108c61d4ea80f1e322c4f284561108b6c626f6f72f449e4412086e12fd5a662d7815a8bc15754ab1d795f5de8bb4df0a023ab1b5df4d2d8cd235883281eb233005b94cfea7", 0x96}, {&(0x7f00000055c0)="a0c22b12adb3da23cc394ecf5e5cf5cb3cd705408be158bbf7958e75357d38a4b626c9579b8c6d", 0x27}, {&(0x7f0000005600)="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", 0x1000}, {&(0x7f0000006600)="45409b615d05c3278bee7fa0603d78ba80ed01459e1b3c7dcb75ed9154c4e65ce3dca211546d3e3086f2329921371288102ae4cebbe0c84cbb02d7d9d1261ba80c83ddd36c4082018798a51742f87852d2d4524d84e651c7a2ccd18e38267bba1b8459cf1407fe1f28777c3fd4cfa6161de2754fb08a6208fed908728463944af0dd85059d468cf88c658dc46b81e2ae6aa5c1c14fc7549873dd9b715af25c0449fc7cf191832b1a9f5048c47ebe065a897d8f4b2c7030f5898c17d375b0c4b1e3462bf56e88b7071ee8ad28ac4abdf5c1cdb704f08b36c56c6d4e5460b56d1b292c5a8670344e84ccc96f8a4a7cc30ba82f5b99502ba5a0", 0xf8}, {&(0x7f0000006700)="a5a1f41d11151a4207d8dfbe0ee6e3e61ecd718ebde27162d01737e85b7fd57d4686b1401a058b218635b4476abca882d1e0e2cbff928dcbf341b68b5418f8", 0x3f}, {&(0x7f0000006740)="5632267b21e45256edf76fc0dec5ed68e77292f7c7dc5948921e551853d5dd86057db7f7329e69d2da8f3a41618da87705a2dc382bf57b7984db8c8d2d8fddd4e0c9d37b2dccd040fd187644020f63c6df614da8c1bd098d35e67858a7857202373f52d17fdb5138bd6df74ec6f164f93505dd854026b52d9306cb7869a5d4fc0dbdf19159de4355b2700efa900f95223fbe864dd847f4f97ea2acb64fa5b0cae6e1e6ace1", 0xa5}], 0x8, &(0x7f0000006c00)}}, {{&(0x7f0000006c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006dc0)=[{&(0x7f0000006d00)="f8346bcf6c038033ebc2", 0xa}, {&(0x7f0000006d40)="2f2ae1afaa14f923c02f79230d004ca56ae2d25204f0c7cb3465ef26f15efebdd747648c5367813376331c1053f2b8f3b9433b66f891ffebcbb8f9c61ac6cca8d3df2fb703f83abfb2cd58bfb9b1d7a7", 0x50}], 0x2, &(0x7f0000007080)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r2, r3, r2, r2, r2, 0xffffffffffffffff, r4, r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r8}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, r10}}}, @rights={{0x18, 0x1, 0x1, [r0, r11]}}], 0x108, 0x40}}], 0x4, 0x4815) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:46:27 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00+\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:46:27 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:46:27 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:46:27 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, 0x0) 08:46:27 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r1, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) write(r1, &(0x7f0000000040)="8c7bf6ad48726aac77f1fd96f193deb01521cfc941b0c0c2fdfec16189c5639c063c780ede96893f8efd4b1639a9200a9b7960607718c8f5965d49dfd75bb18955909793f20e139421f6da6198fac845f4e9eea8c09922f290ba6aec1567de88335aa35d6d74e36b08350e5bcd61cd2143b7d07087f42e25a71afc3886d89f9cb01a961108fa4760604f4577102bfe461e24f0df5909cf413e16929241354a3f6f8cc417b04f6546f7b113daecec8211f52bdb6e9aa526ca2fbf1a9ea6bf0d39041ce15f45abb25d81aa741dcb3da0aeff049057fe4aa76d7b2e7826e532ce9586d6c7", 0xe3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 08:46:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x900, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:46:27 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140), 0x6) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r5 = dup3(r3, r4, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) bind$bt_hci(r5, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/sockstat6\x00') renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x20, 0x20, 0x4, 0x5, 0x0, 0x10001, 0xd02, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x232, 0x8}, 0x800, 0x1a7, 0x400, 0x1, 0x8000, 0x41, 0x20, 0x0, 0x0, 0x0, 0x1}, r6, 0x5, r2, 0x19) socket$inet6_udp(0xa, 0x2, 0x0) 08:46:27 executing program 3: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x20) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='/dev/loop#\x00') ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)=0x80000000) 08:46:27 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00,\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:46:27 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:46:27 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = getpgid(0x0) fcntl$lock(r2, 0x25, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r3}) r4 = fork() kcmp(r3, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xbb, 0x5, 0x3, 0xbe, 0x0, 0x1, 0x840, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x3, 0x3}, 0x1000, 0x6, 0x4, 0x2, 0x7, 0x10000, 0x80, 0x0, 0x81, 0x0, 0x3236}, r4, 0xe, r0, 0x8) 08:46:27 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x2, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 1854.006240] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1854.010136] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1854.014077] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1854.018955] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1854.023724] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1856.102580] Bluetooth: hci7: command tx timeout [ 1858.149560] Bluetooth: hci7: command tx timeout [ 1860.197674] Bluetooth: hci7: command tx timeout [ 1862.245523] Bluetooth: hci7: command tx timeout [ 1872.594868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1872.596317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1872.669908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1872.670993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:47:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0xf00, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:47:02 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)) 08:47:02 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x003\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:47:02 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_config_ext={0x7fffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:47:02 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:47:02 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x10}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r1, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) dup(r1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) dup3(r3, r4, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r6, 0xffffffffffffffff, 0x0) dup3(r5, r6, 0x0) splice(r3, &(0x7f0000000180)=0x3, r5, &(0x7f00000001c0)=0x81, 0x6, 0x2) 08:47:02 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:47:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x480, 0x0) bind$bt_hci(r3, &(0x7f0000000140), 0x6) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r5 = dup3(r3, r4, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000540)=ANY=[]}) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0xb8000) dup3(0xffffffffffffffff, r2, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000240)={@remote}, 0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x40, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x86}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040911}, 0x10) getsockname(r1, &(0x7f0000000080)=@vsock, &(0x7f00000001c0)=0x80) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:47:02 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)) 08:47:02 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x0, &(0x7f0000000180)="c32801240f0ae97d3c9bc63cdd0bb97695306b7f3c76552de41889469c4fce895cd594ba2ce71df918bbae209b552af6bd7d46702605983c26305eaade6cbbfc7ac69e1f6e1060ab231dfe45ca51c48f305948fee000ecd91f3351c6614988be439903f63cf2199fb2c90cdd6d1036e96a51715db510aee3a0c113291e97c4c53c362698918c3c3554543012b06ccd81576f9ee1fd8c1dc45b4f2dc3d25a1c8f9ad65795b99f5d27d39652406dccce9b3deaec126e03f7a165cf2b765f7e6be7041bad975a8517a733383e9e64531e6514") 08:47:02 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x7e, 0x20, 0x0, 0x20, 0x0, 0x8000, 0x208, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfe, 0x1, @perf_bp={&(0x7f0000000140), 0x1}, 0x100, 0x4, 0x4, 0x4, 0x80000000, 0xfff, 0xff7f, 0x0, 0x3ff, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xf, r0, 0x1) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x80, 0x3f, 0x1f, 0x45, 0x0, 0xee, 0x10, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1f, 0x5, @perf_bp={&(0x7f0000000200), 0x6}, 0x4010, 0x2, 0xee, 0x1, 0x89f, 0xff, 0x19, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x3f, 0x30, 0x81, 0x3, 0x0, 0x2, 0x102, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x7}, 0xaa4e, 0x92, 0x3, 0x1, 0x55, 0xfffeffff, 0x8, 0x0, 0x1, 0x0, 0x6f87}, 0x0, 0x0, r2, 0x8) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) ioctl$FICLONE(r1, 0x40049409, r2) 08:47:02 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00<\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:47:02 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r1, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x7, 0x3, 0x7, 0x7, 0x0, 0x2, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xce7, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x2600, 0xffffffffffff0001, 0x8, 0x9, 0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x7484}, 0x0, 0xa19bb83, r2, 0x1) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) 08:47:02 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:47:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x1702, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:47:02 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, 0x0) 08:47:02 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00`\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:47:02 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0xff, 'id1\x00', 'timer1\x00'}) 08:47:02 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)) 08:47:02 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x5, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:47:02 executing program 3: perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x8001, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9a, 0x18941) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:47:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0xf000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:47:12 executing program 3: ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:47:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x30000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:47:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000000000)="5e4c18e34e50bd266edaddaf355d2939829e98915d9119c23207a9e8105ef46ee1de06cbfd793e975f4851fc2bd39ccd5bc0f283e623205db6ef3ecf4d53febb5e80d3b994e4882c912f0088b3b2a7e564dc93286b00ce2296bcb8346741578b4bb7e07d22c802e734454543d0671db8b06489cadaef9e57da0156dc6d62e4e040c16146c41c20caa2600a36c5c14d0d061da1a36ef3aef10892a4dfc1096fb0ed4ca3ffb95b5c91964006d4ec2a131664", 0xb1}], 0x2, 0xff, 0x20, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 08:47:12 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00h\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:47:12 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, 0x0) 08:47:12 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x8000000000000025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:47:12 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)="8c4b3a504405c4d83e14e3b0a141912bdf98a89f789d0cba1b8b0a6f4adf0bd548da5905fe2c2fa198a43819ea45b578a6c6a6515c") 08:47:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x6, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:47:12 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, 0x0) 08:47:12 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "008200", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:47:12 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = syz_io_uring_complete(0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x3, 0x6, 0x0, 0xf7ffffff}, 0x0, 0x6, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x9, 0x8005, 0x1}) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000140)={0x1, 0x8}) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f00000001c0)=0x1) 08:47:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x7, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:47:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:47:22 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x2}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400000) r1 = socket$inet_icmp(0x2, 0x2, 0x1) fsetxattr$security_capability(r1, &(0x7f0000000180), &(0x7f00000001c0)=@v3={0x3000000, [{0x10000, 0x1}, {0x0, 0x6}], 0xee01}, 0x18, 0x0) 08:47:22 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) 08:47:22 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = getpgid(0x0) fcntl$lock(r4, 0x25, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r5}) r6 = fork() kcmp(r5, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x100, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r5, 0x4, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000000)='./file0\x00') getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:47:22 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)) 08:47:22 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00ff02", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:47:22 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000080)='attr/fscreate\x00') syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x45, 0x9, 0x7, 0x9, 0x0, 0x1, 0xe4, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x791, 0x0, @perf_bp={&(0x7f0000000140), 0xf}, 0xc4a, 0x710, 0x2, 0x9, 0x83, 0x8, 0x21, 0x0, 0x1f, 0x0, 0x100000000}, r1, 0xd, r0, 0x3) 08:47:32 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "000003", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:47:32 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x2, 0x2, 0x6, 0x2, 0x4}, 0x4}) 08:47:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) 08:47:32 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) 08:47:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:47:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0xf0ffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:47:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7c4666d7035828c4690bca329e3b"], 0x52) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) pipe(0x0) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="83c83a6b74fdd7dae2560f0d6bcdf401a18cd7c34fe78840d0fc0c8caf2d9c8ca8a0660dfe470ef95d8b826bd20b9e8964f2d9accde1c4ccb2ae12f8d216fb557fb089895e36e249d8a911a03b9fba14b9f7c96ac9bac4c77b61548de778561c9d689fff679fa3dcebe10dcc9dfba5804ba9df092e8d9de7b761192cf50000"], 0x7) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r0, r2, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r4, 0x400448e2, &(0x7f0000000540)="74e2ce96780467d9defd9af315be95ed34910e010e0da5f9f140053a74337b6f8538c58edf9f8b391b92be6be1e55841b27ceb1cca98599d63b38b268bf13e4637fcf0c673d1e98a5f2736d7c36b93fb7d2f0946ba8515474f3da2350293da1381b5b5404bc8682447eba6e7b47b1df7d0cc") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000a40)) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000000906030000000000000000000500000605000100070000000900020073797a31000000000900020073797a3000000000040007805400078008000b4000000006060004404e2200000c001b400000000000007fff0c001940000000000000000114001700677265346170300000000000000000000900120073797a450000000008000b40000000013400078006001a0023000000140017006970366772653000000000000000000005001a00000000000a001100ffffffffffff000005000100070000000900020073797a3200000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) socket$inet6_udp(0xa, 0x2, 0x0) chmod(&(0x7f00000005c0)='./file0\x00', 0x50) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000600)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000080000000f74d42bd83569a390e5f7450808471192507351381c0aa087d07954ebc104a7b1722f49be52658e1c6d95ab4047acf60c65d7ec14814fcab1b68653b951450b784b9ca7c45d0112dd73a2ff30e369de0213170c4b401cfd8ab560855690bd5d3ba72ccfd6e316076f6ade9da9fd4b00633196ab02aaf3547c9e68f0bc8a00d3f000000b3aa6f56c23975"], &(0x7f0000000240)=0xa4) socket$nl_generic(0x10, 0x3, 0x10) 08:47:32 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x3) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) dup3(r3, r4, 0x0) fcntl$setpipe(r4, 0x407, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) 08:47:32 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "000005", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:47:32 executing program 5: ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000140)={'ip_vti0\x00'}) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x866}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f00000001c0)={{0xffffffffffffffff, 0x2, 0x9, 0x0, 0x200}, 0x6db00000, 0x10001}) 08:47:32 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3f, 0xff, 0x40, 0x9, 0x0, 0xffffffffffffffff, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x100000000, 0x8}, 0x6100, 0x1a, 0xcbc9, 0x0, 0x6, 0x1f, 0x200, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0xfc, 0x68, 0x1, 0x0, 0x0, 0x8, 0x308b, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000140), 0x4}, 0x2800, 0x20, 0x5, 0x2, 0x4, 0xff, 0xf01, 0x0, 0xa48a, 0x0, 0x100}, 0x0, 0x8, r0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x6) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x1, 0x3f, 0x0, 0x7, 0x0, 0x14d2400000000000, 0x88041, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8000, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x4980, 0x8001, 0x1, 0x9, 0x800, 0x8000, 0x800, 0x0, 0xfffff7c3, 0x0, 0x7b6b}, 0x0, 0xb, r1, 0x13) 08:47:32 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="00001e74408d0000a6e834b50f474f6edaeb1ff964b113cf65f0be4ab146aa7a9636645f0ae3094e59e50bfee32de576970308a41f1fd6c2cf47288f8895dca6e8681f1f7c4666d7035828c4690bca329e3b"], 0x52) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) pipe(0x0) bind$bt_hci(r0, &(0x7f0000000140), 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="83c83a6b74fdd7dae2560f0d6bcdf401a18cd7c34fe78840d0fc0c8caf2d9c8ca8a0660dfe470ef95d8b826bd20b9e8964f2d9accde1c4ccb2ae12f8d216fb557fb089895e36e249d8a911a03b9fba14b9f7c96ac9bac4c77b61548de778561c9d689fff679fa3dcebe10dcc9dfba5804ba9df092e8d9de7b761192cf50000"], 0x7) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r3 = dup3(r0, r2, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r4, 0x400448e2, &(0x7f0000000540)="74e2ce96780467d9defd9af315be95ed34910e010e0da5f9f140053a74337b6f8538c58edf9f8b391b92be6be1e55841b27ceb1cca98599d63b38b268bf13e4637fcf0c673d1e98a5f2736d7c36b93fb7d2f0946ba8515474f3da2350293da1381b5b5404bc8682447eba6e7b47b1df7d0cc") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000a40)) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="d40000000906030000000000000000000500000605000100070000000900020073797a31000000000900020073797a3000000000040007805400078008000b4000000006060004404e2200000c001b400000000000007fff0c001940000000000000000114001700677265346170300000000000000000000900120073797a450000000008000b40000000013400078006001a0023000000140017006970366772653000000000000000000005001a00000000000a001100ffffffffffff000005000100070000000900020073797a3200000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) socket$inet6_udp(0xa, 0x2, 0x0) chmod(&(0x7f00000005c0)='./file0\x00', 0x50) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000600)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000080000000f74d42bd83569a390e5f7450808471192507351381c0aa087d07954ebc104a7b1722f49be52658e1c6d95ab4047acf60c65d7ec14814fcab1b68653b951450b784b9ca7c45d0112dd73a2ff30e369de0213170c4b401cfd8ab560855690bd5d3ba72ccfd6e316076f6ade9da9fd4b00633196ab02aaf3547c9e68f0bc8a00d3f000000b3aa6f56c23975"], &(0x7f0000000240)=0xa4) socket$nl_generic(0x10, 0x3, 0x10) 08:47:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x9, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:47:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:47:33 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) dup3(r0, r1, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff}, 0x6) r4 = syz_open_dev$mouse(&(0x7f0000000100), 0x7, 0x205582) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000180)={0x1, 0xffffffff, 0x4, 0x0, 0xf}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) sendto(r3, &(0x7f0000000200)="7dcdd687c7bb9a0cf5928dd77572e7e38bc13b198e86d670068dae0eef5fb64baf7a86aba084e77a3acdff29488d3bd8a818cd5e68c66a260c0c5e8c01058d8edea98d77d4b39ed5d99bacdfc2b0c59e1ca574cf982e8e63ed9e30bde0afd72e3239e65f6bffd289e627e6923301f8c02e787d89ae2054c905eb2e", 0x7b, 0x400c080, &(0x7f0000000280)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x80) 08:47:33 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r1, 0xee01}}, './file0\x00'}) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x6) 08:47:33 executing program 5: ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000140)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:47:33 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) 08:47:33 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "000006", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:47:33 executing program 3: ioctl$CDROM_LAST_WRITTEN(0xffffffffffffffff, 0x5395, &(0x7f0000000000)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:47:33 executing program 5: ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f0000000180)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) socketpair(0x18, 0xa, 0xe72, &(0x7f0000000140)) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000200)={{0x1, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xffffffff}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa000) 08:47:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0xf, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:47:33 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00\x00 ', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:47:33 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x80081280, 0x6) 08:47:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:47:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x352d674c}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x8800) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x5000200, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x6) 08:47:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0xf0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:47:33 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00\x00+', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:47:33 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') io_setup(0x9, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x2, 0x8000000}]) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) dup3(r3, r4, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r6, 0xffffffffffffffff, 0x0) dup3(r5, r6, 0x0) io_submit(r2, 0x3, &(0x7f0000000580)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0xe, r4, &(0x7f00000001c0)="54158e49b67b66b756cf516a847fecfd1d1f4b77cd0377107752d172ca2093295ade7a0211d0b79b80016b8524b819e9b2218bb9d6028bd2295830decdac2f6a1c3dc0915a7bbd72ffe9f9f6d422c6aa49541874ab05ed6681128b5fa55e820f32c1b45398367465e8355abd367d7d4e203e5a16ef455179e545dd5d6dc9f2b72580e964907c0c91c3fe5b49fcdc7885d5eb7db4ea76f251d009a4b2d1d36e2b3c94257458f88e10e864e75f8c56fc37251783b98dc7b9f7800d74055db73a94a3f2caa3ea905334de93", 0xca, 0x7}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x1, r0, &(0x7f00000003c0)="0912f2d420e49dd53a4c931481a4c0f09cf02c7fc6ff2828b5dc857eb3727c3c26111479acd51fef3cfdd098e6c8af3d32dc04def0f12418bded2ffb029c4d8c6f9ce580c46d6e86f245d1198b49b9acc6fdaf6920f5e27498b95279120276de9562d762a497c7b7c82362b649f78b7eafa291007c7c430e2294f8401b66ea109147af5c9856a4fd86cb9b6abf1501af26b62cc029f6a3ce170081881828a981dd3aa3a79b9d84abd5efaf48e8fc9d025555a73bca6f321956199707975c7df61fdd20cbd8e7a5830494d42cc2b968090a2af85e95bde92f8ef866a24cb679898dc97d96e185ce", 0xe7, 0x3, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x1f, r5, &(0x7f00000004c0)="ade84f37a810b7284fe143dcc704ec158b176abc14f2e7ab1f743c0eb756e9f4d2cb05824e0614930976a9df8ca43ab47ae042105737847611c9bf5ec241dbb89edfafbdc170d6c427d554f21d226118ca3688d3dda6bce58fcb8e901a49e83994c746b6c97d649658bb63f370ef2eaba0d4c6", 0x73, 0x0, 0x0, 0x1}]) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x101200, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r8) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:47:43 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_setup(0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140), 0x6) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r5 = dup3(r3, r4, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x800, r0, &(0x7f0000000180)="348244407ed25615759c693a3b1556d4b845e8467d38f08199e9aeb56ba0d210edd90e855db310ddd52c4b46de006dbcdb588fafc97e28da7c5d34c11ffdc89ee247a1afca1c180c29f9b618e81e150c6153d08bdd222145c180c09251f59c96343ebae8", 0x64, 0x0, 0x0, 0x3, r5}]) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:47:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x11d, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:47:43 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) 08:47:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x3000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:47:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x1, 0x4}, 0x6) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:47:43 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c05, 0x6) 08:47:43 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00\x00,', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:47:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0xd, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800008}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x50, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x880) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xa8, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVICE={0x4c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x20}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x9}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20040080}, 0x800) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x6) 08:47:43 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00\x003', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:47:43 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) (fail_nth: 1) 08:47:43 executing program 5: acct(0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x20052, 0x8, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0xb8, 0x8c}, 0x2049, 0x8, 0x3ff, 0x0, 0x0, 0x8, 0x8, 0x0, 0x3f, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x3}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x3) [ 1926.757126] FAULT_INJECTION: forcing a failure. [ 1926.757126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1926.758947] CPU: 1 UID: 0 PID: 15210 Comm: syz-executor.2 Not tainted 6.17.0-rc1-next-20250815 #1 PREEMPT(voluntary) [ 1926.758976] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1926.758988] Call Trace: [ 1926.758997] [ 1926.759006] dump_stack_lvl+0xfa/0x120 [ 1926.759041] should_fail_ex+0x4d7/0x5e0 [ 1926.759081] _copy_from_user+0x30/0xd0 [ 1926.759119] hci_sock_ioctl+0x722/0x810 [ 1926.759155] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 1926.759188] ? __pfx_perf_trace_lock+0x10/0x10 [ 1926.759211] ? proc_fail_nth_write+0x97/0x220 [ 1926.759251] sock_do_ioctl+0xd1/0x240 [ 1926.759279] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1926.759303] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1926.759331] ? do_vfs_ioctl+0x125/0x1470 [ 1926.759358] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1926.759381] ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0 [ 1926.759404] ? __mutex_unlock_slowpath+0xb1/0x750 [ 1926.759429] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1926.759467] sock_ioctl+0x40d/0x630 [ 1926.759498] ? __pfx_sock_ioctl+0x10/0x10 [ 1926.759527] ? lock_release+0xc8/0x290 [ 1926.759560] ? selinux_file_ioctl+0xb9/0x280 [ 1926.759584] ? __pfx_sock_ioctl+0x10/0x10 [ 1926.759617] __x64_sys_ioctl+0x18f/0x210 [ 1926.759646] do_syscall_64+0xbf/0x360 [ 1926.759673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1926.759696] RIP: 0033:0x7f8d1175bb19 [ 1926.759712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1926.759732] RSP: 002b:00007f8d0ecd1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1926.759753] RAX: ffffffffffffffda RBX: 00007f8d1186ef60 RCX: 00007f8d1175bb19 [ 1926.759768] RDX: 0000000020000180 RSI: 00000000400448e7 RDI: 0000000000000004 [ 1926.759781] RBP: 00007f8d0ecd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1926.759793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1926.759806] R13: 00007ffd71c31e0f R14: 00007f8d0ecd1300 R15: 0000000000022000 [ 1926.759842] 08:47:43 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) 08:47:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:47:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x300, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:47:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) (fail_nth: 2) 08:47:55 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) 08:47:55 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00\x00<', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:47:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0x0, 0x3}, 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0/file0\x00', 0x40, 0x5) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000000b060000000000000000000000000000a810e287c6aa874f4d4cc930a55f18482ddebb08ec360e7e3ec74f6011389da48aaa4924bd678c10f41ddcd1633effddbf1e1560c3e78136bd47292d5eca7af7a86c364be4073d9c0f651d15ff8745c90d01021d48168d05b02a0e5fa70f10672b724f44e1006c55fd2c6e5ce41958d3e1eacb40a2506751641beb01015113ff59b4c8a1bb1f839ce699c188e5825adbb57c5a64d05aa338f1e1094579a363f3"], 0x14}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x16c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x81}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x1}, 0x1) faccessat(r4, &(0x7f0000000000)='./file0/file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 08:47:55 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x2, 0x0, 0x0, 0x200}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0xfffffffffffffffd, 0xff, 0x578}) 08:47:55 executing program 3: clock_gettime(0x0, &(0x7f0000006400)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000061c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/15, 0xf}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/168, 0xa8}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000200)=""/70, 0x46}, {&(0x7f0000000280)=""/155, 0x9b}], 0x6, &(0x7f0000001440)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000001480), 0x6e, &(0x7f0000001980)=[{&(0x7f0000001500)=""/78, 0x4e}, {&(0x7f0000001580)=""/225, 0xe1}, {&(0x7f0000001680)=""/220, 0xdc}, {&(0x7f0000001780)=""/245, 0xf5}, {&(0x7f0000001880)=""/229, 0xe5}], 0x5, &(0x7f0000001a00)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001ac0)=""/220, 0xdc}, {&(0x7f0000001bc0)=""/230, 0xe6}], 0x2, &(0x7f0000001d00)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}}, {{&(0x7f0000001e40), 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000001ec0)=""/4096, 0x1000}, {&(0x7f0000002ec0)=""/30, 0x1e}, {&(0x7f0000002f00)=""/102, 0x66}, {&(0x7f0000002f80)=""/3, 0x3}], 0x4, &(0x7f0000003000)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f00000030c0)=@abs, 0x6e, &(0x7f0000003240)=[{&(0x7f0000003140)=""/69, 0x45}, {&(0x7f00000031c0)=""/104, 0x68}], 0x2, &(0x7f0000003280)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000003300)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f0000003380)=""/92, 0x5c}, {&(0x7f0000003400)=""/255, 0xff}], 0x2, &(0x7f0000003540)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000004580)=""/109, 0x6d}], 0x2, &(0x7f0000004640)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}}, {{&(0x7f0000004780), 0x6e, &(0x7f0000005c00)=[{&(0x7f0000004800)=""/77, 0x4d}, {&(0x7f0000004880)=""/17, 0x11}, {&(0x7f00000048c0)=""/105, 0x69}, {&(0x7f0000004940)=""/190, 0xbe}, {&(0x7f0000004a00)=""/250, 0xfa}, {&(0x7f0000004b00)=""/20, 0x14}, {&(0x7f0000004b40)=""/55, 0x37}, {&(0x7f0000004b80)=""/102, 0x66}, {&(0x7f0000004c00)=""/4096, 0x1000}], 0x9}}, {{0x0, 0x0, &(0x7f0000006140)=[{&(0x7f0000005cc0)=""/191, 0xbf}, {&(0x7f0000005d80)=""/195, 0xc3}, {&(0x7f0000005e80)=""/166, 0xa6}, {&(0x7f0000005f40)=""/121, 0x79}, {&(0x7f0000005fc0)=""/82, 0x52}, {&(0x7f0000006040)=""/222, 0xde}], 0x6}}], 0x9, 0x3, &(0x7f0000006440)={r0, r1+10000000}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8010}, r2, 0x0, 0xffffffffffffffff, 0x9) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x6) 08:47:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x5000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:47:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x500, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 1939.161575] FAULT_INJECTION: forcing a failure. [ 1939.161575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1939.162865] CPU: 0 UID: 0 PID: 15233 Comm: syz-executor.2 Not tainted 6.17.0-rc1-next-20250815 #1 PREEMPT(voluntary) [ 1939.162884] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1939.162893] Call Trace: [ 1939.162898] [ 1939.162903] dump_stack_lvl+0xfa/0x120 [ 1939.162926] should_fail_ex+0x4d7/0x5e0 [ 1939.162954] _copy_to_user+0x32/0xd0 [ 1939.162973] simple_read_from_buffer+0xe0/0x180 [ 1939.162996] proc_fail_nth_read+0x18a/0x240 [ 1939.163019] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1939.163041] ? security_file_permission+0x22/0x90 [ 1939.163061] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1939.163084] vfs_read+0x1eb/0xc70 [ 1939.163113] ? __pfx_vfs_read+0x10/0x10 [ 1939.163134] ? lock_release+0xc8/0x290 [ 1939.163157] ? __fget_files+0x20d/0x3b0 [ 1939.163194] ksys_read+0x121/0x240 [ 1939.163211] ? __pfx_ksys_read+0x10/0x10 [ 1939.163246] do_syscall_64+0xbf/0x360 [ 1939.163265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1939.163278] RIP: 0033:0x7f8d1170e69c [ 1939.163288] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1939.163299] RSP: 002b:00007f8d0ecd1170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1939.163311] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8d1170e69c [ 1939.163319] RDX: 000000000000000f RSI: 00007f8d0ecd11e0 RDI: 0000000000000006 [ 1939.163326] RBP: 00007f8d0ecd11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1939.163333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1939.163339] R13: 00007ffd71c31e0f R14: 00007f8d0ecd1300 R15: 0000000000022000 [ 1939.163374] 08:47:55 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x1, 0x1f, 0x8, 0x20, 0x0, 0x8, 0x24, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x80, 0xfffffffffffffff7}, 0x20, 0x3ff, 0x8, 0x0, 0x1, 0x639f, 0x6, 0x0, 0x2, 0x0, 0x4f}, 0x0, 0x9, 0xffffffffffffffff, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:47:55 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00\x00@', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:47:56 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) 08:47:56 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = signalfd(r0, &(0x7f0000000140)={[0x7]}, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ppoll(&(0x7f0000000180)=[{r1, 0x1501}, {r2, 0x801}], 0x2, &(0x7f00000001c0), &(0x7f0000000200)={[0x3]}, 0x8) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:48:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:48:05 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000180)) 08:48:05 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r1, 0x7, 0x6, 0x1d}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000003c0)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:48:05 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0xe9266000) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000080)={{r2}, 0x1, 0x8, 0xc259}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r6, 0xffffffffffffffff, 0x0) dup3(r5, r6, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000001, 0x10, r6, 0x16167000) ftruncate(r0, 0x0) dup3(r3, r4, 0x0) tee(r4, r0, 0x7, 0x1) 08:48:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x6000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:48:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x600, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:48:05 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) 08:48:05 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00\x00`', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:48:17 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x0) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x2, 0xffffffffffffffff}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0x145000, 0x0) write(r3, &(0x7f0000000280)="746786a4ee2c8adcb1941de0d884e2a6ca69280032e1fa0bf4ccd81d429d4adfa34b003b91af635eba8d151fab4d66609f87e39e37ba5fd1d009a8248f1642528266f80f7faf15028489d3a174f6321b540c6d853417b7189721edb7b9a5f265c3fa676126958dc4b4820b90b3", 0x6d) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140), 0x6) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r6 = dup3(r4, r5, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_IRQP_READ(r7, 0x8008700b, &(0x7f0000000100)) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xc5, 0x0, 0x80, 0x5, 0x0, 0x3f, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x6184, 0x40, 0x4, 0x1, 0x100000001, 0xb684, 0xff, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r6, 0x8) 08:48:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x700, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:48:17 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000180)) 08:48:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000400)={0x5e, 0x100000000, 0x1, 0xbb, 0x9, [{0x1ff, 0xa4, 0x200, '\x00', 0x2582}, {0x6, 0x7ff, 0x81a, '\x00', 0x800}, {0x3, 0x9, 0x80000000, '\x00', 0x1600}, {0x9, 0x1, 0xf6c8}, {0x3ff, 0x400, 0xffff, '\x00', 0x2908}, {0xfffffffffffffff9, 0x3ff, 0x3, '\x00', 0x1500}, {0x7fffffff, 0x7, 0x7fff, '\x00', 0x400}, {0x1c6, 0x9, 0x327, '\x00', 0x2}, {0x3, 0x8, 0x4, '\x00', 0x1004}]}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:48:17 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00\x00h', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:48:17 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x2, &(0x7f0000000180)) 08:48:17 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:48:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x7000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:48:17 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "000082", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:48:17 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x4b47, &(0x7f0000000180)) 08:48:17 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) 08:48:17 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) ptrace(0x8, 0x0) 08:48:17 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "0000ff", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:48:17 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) dup3(r0, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000180)) 08:48:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x9000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:48:17 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x0, 0xf3a}, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:48:17 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x4b49, &(0x7f0000000180)) 08:48:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x900, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:48:17 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140), 0x6) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r3, r4, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r6 = dup3(r2, r5, 0x0) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000000906000000000000000000000000000092a3f8acd07753c6feccb27a473bfdf62ef52a9f1fe529658862ec934f271db4ace19dcc5a3246cbd81b80abaa5a22d842888b92631a109e38abd795d995bcea1d7cd53879b8a214378166c4e09ee5cab4fae6202424f9d227327d466932c908cc29aced32ec3162a7d3f9faacfeea824e86ab930aa826920d24978dd98501238254340e83d7bd2c09f9353f68eeb31ddf2d830fd0f9bc27244c994fa54732aa7003f089123f421294a0c62e6f2e9b4a0a35e25626617f4430626457ff13f8049b5cf832a2"], 0x14}}, 0x0) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0x4}, 0x6) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000a40)) socket$inet6_udp(0xa, 0x2, 0x0) 08:48:17 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "0002ff", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:48:17 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x10001) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:48:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)) (fail_nth: 1) 08:48:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0xf000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:48:26 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) 08:48:26 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:48:26 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x541b, &(0x7f0000000180)) 08:48:26 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r5, 0xffffffffffffffff, 0x0) dup3(r4, r5, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000200)=0x200) r6 = dup3(r2, r3, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xfc, 0xff, 0x9, 0xb9, 0x0, 0x9, 0x20a20, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x10000, 0x2}, 0x0, 0x20, 0xff, 0x9, 0x7fffffff, 0x800, 0x1, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x6, r0, 0x8) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r7 = syz_open_dev$ptys(0xc, 0x3, 0x0) write$binfmt_aout(r7, &(0x7f0000000400)=ANY=[@ANYBLOB="0701809462000000c2010000e22200009b030000050000000000000000000000f2768c1c481c4b8d9dedc332758fb09b9fd95ef00f81c556d0f52fb7bebbfc87e2e057ca232d1aed51be7f2805a9b83eb37cbbcf27d1bb82d5664503fb434f674d377af177774ada903b481cb51fbf4664863f72aa6b58e1c27fb5a4c7e4470b25f88d477e2bfd22a084284a46cc04ae7d882058d1c1611c4ff4dc71ff7397f4d2d1523988af4a8483f6101adb36f2cf7ad8ed09b2a7b1eb4a9d3c6248b359459c57f6d5048b8c9ac7bec6ec6cabd9576d7b12075d7075fe30139090826da4d9c77e00"/1762], 0x6e2) 08:48:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0xf00, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 1969.904775] FAULT_INJECTION: forcing a failure. [ 1969.904775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1969.906041] CPU: 0 UID: 0 PID: 15354 Comm: syz-executor.1 Not tainted 6.17.0-rc1-next-20250815 #1 PREEMPT(voluntary) [ 1969.906057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1969.906064] Call Trace: [ 1969.906069] [ 1969.906075] dump_stack_lvl+0xfa/0x120 [ 1969.906098] should_fail_ex+0x4d7/0x5e0 [ 1969.906127] _copy_from_user+0x30/0xd0 [ 1969.906153] hci_get_conn_info+0x98/0x600 [ 1969.906172] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1969.906198] ? __pfx_hci_get_conn_info+0x10/0x10 [ 1969.906226] ? mark_held_locks+0x49/0x80 [ 1969.906251] hci_sock_ioctl+0x781/0x810 [ 1969.906274] ? __pfx_hci_sock_ioctl+0x10/0x10 [ 1969.906314] sock_do_ioctl+0xd1/0x240 [ 1969.906332] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1969.906345] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1969.906365] ? do_vfs_ioctl+0x125/0x1470 [ 1969.906384] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1969.906397] ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0 [ 1969.906410] ? __mutex_unlock_slowpath+0xb1/0x750 [ 1969.906427] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1969.906453] sock_ioctl+0x40d/0x630 [ 1969.906473] ? __pfx_sock_ioctl+0x10/0x10 [ 1969.906489] ? lock_release+0xc8/0x290 [ 1969.906517] ? selinux_file_ioctl+0xb9/0x280 [ 1969.906534] ? __pfx_sock_ioctl+0x10/0x10 [ 1969.906555] __x64_sys_ioctl+0x18f/0x210 [ 1969.906575] do_syscall_64+0xbf/0x360 [ 1969.906594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1969.906608] RIP: 0033:0x7f2944710b19 [ 1969.906618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1969.906630] RSP: 002b:00007f2941c86188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1969.906642] RAX: ffffffffffffffda RBX: 00007f2944823f60 RCX: 00007f2944710b19 [ 1969.906650] RDX: 00000000200000c0 RSI: 00000000800448d5 RDI: 0000000000000004 [ 1969.906657] RBP: 00007f2941c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1969.906664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1969.906671] R13: 00007ffe601a593f R14: 00007f2941c86300 R15: 0000000000022000 [ 1969.906707] 08:48:26 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00F}', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:48:26 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = getpgid(0x0) fcntl$lock(r1, 0x25, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r2}) r3 = fork() r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r6 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r6, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f00000002c0)={{0xfffffffffffffffd, 0x3, 0xffff, 0x2, 0x80000001}, 0x3, 0x10001}) close_range(r5, 0xffffffffffffffff, 0x0) dup3(r4, r5, 0x0) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f00000003c0)={0x80000001, 0x1000, 0x0, 0x3e00000, 0x9, [{0x4, 0x3b, 0x8, '\x00', 0x1201}, {0xfa, 0x18, 0x5, '\x00', 0x142}, {0x7fffffff, 0x4, 0x3, '\x00', 0x2c89}, {0x1, 0x401, 0x1, '\x00', 0x1488}, {0x7f, 0x100000000, 0x8, '\x00', 0x800}, {0x8, 0x2000000, 0x100000001, '\x00', 0x8}, {0x83, 0x5, 0x3, '\x00', 0x104}, {0x2400000, 0xd875, 0x100000000}, {0x0, 0xa1d9, 0x7ff, '\x00', 0xc86}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, &(0x7f0000000240)={{0x2, 0x3, 0x401, 0x3, 0x4}, 0x6, 0x4}) kcmp(r2, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x20, 0x20, 0x1f, 0x0, 0x0, 0x3, 0x8088, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f00000001c0), 0xd}, 0x80, 0xfffffffffffffffc, 0x7, 0x7, 0x7, 0x3f, 0x7218, 0x0, 0x6, 0x0, 0x95}, r2, 0xc, 0xffffffffffffffff, 0x3) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:48:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x17020000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:48:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)) (fail_nth: 2) 08:48:26 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) [ 1970.059377] FAULT_INJECTION: forcing a failure. [ 1970.059377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1970.060469] CPU: 0 UID: 0 PID: 15369 Comm: syz-executor.1 Not tainted 6.17.0-rc1-next-20250815 #1 PREEMPT(voluntary) [ 1970.060486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1970.060494] Call Trace: [ 1970.060499] [ 1970.060505] dump_stack_lvl+0xfa/0x120 [ 1970.060528] should_fail_ex+0x4d7/0x5e0 [ 1970.060559] _copy_to_user+0x32/0xd0 [ 1970.060579] simple_read_from_buffer+0xe0/0x180 [ 1970.060605] proc_fail_nth_read+0x18a/0x240 [ 1970.060630] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1970.060654] ? security_file_permission+0x22/0x90 [ 1970.060675] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1970.060697] vfs_read+0x1eb/0xc70 [ 1970.060729] ? __pfx_vfs_read+0x10/0x10 [ 1970.060752] ? lock_release+0xc8/0x290 [ 1970.060776] ? __fget_files+0x20d/0x3b0 [ 1970.060815] ksys_read+0x121/0x240 [ 1970.060835] ? __pfx_ksys_read+0x10/0x10 [ 1970.060872] do_syscall_64+0xbf/0x360 [ 1970.060892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1970.060907] RIP: 0033:0x7f29446c369c [ 1970.060917] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1970.060929] RSP: 002b:00007f2941c86170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1970.060942] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f29446c369c [ 1970.060950] RDX: 000000000000000f RSI: 00007f2941c861e0 RDI: 0000000000000006 [ 1970.060958] RBP: 00007f2941c861d0 R08: 0000000000000000 R09: 0000000000000000 [ 1970.060965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1970.060973] R13: 00007ffe601a593f R14: 00007f2941c86300 R15: 0000000000022000 [ 1970.061011] 08:48:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x1d01, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 1977.701770] Bluetooth: hci7: command 0x0406 tx timeout 08:48:36 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x800448d5, &(0x7f00000000c0)) 08:48:36 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) 08:48:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x9effffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:48:36 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:48:36 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x5421, &(0x7f0000000180)) 08:48:36 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0xf000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:48:36 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:48:36 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=@ng={0x4, 0xb, "d1e8602c2a7d7055d27703"}, 0xd, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000400)={{r1}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000080)={0x0, 0x3, 0x55c, 0x100, {0x1, 0x3, 0x10001, 0x9, 0x7f}, [0x8001, 0x0, 0x100000001]}}, @devid}) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140), 0x6) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r4, r5, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r7, 0xffffffffffffffff, 0x0) dup3(r6, r7, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r6) 08:48:36 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x30000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:48:36 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x8, 0x0, 0x2, 0x27, 0x0, 0x8, 0x440, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x87f}, 0xc02, 0x1f, 0x291, 0xa, 0xf3, 0x7, 0x3, 0x0, 0x1f, 0x0, 0x9}, r2, 0x0, r0, 0x9) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) copy_file_range(r1, &(0x7f0000000000)=0x827, r1, &(0x7f0000000040)=0xfe4, 0x101, 0x0) 08:48:36 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x5450, &(0x7f0000000180)) 08:48:37 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:48:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0xf0ffffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:48:37 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x2, &(0x7f00000000c0)) 08:48:37 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000180)) 08:48:37 executing program 5: ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x7) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x0) 08:48:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:48:37 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8240c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xd}, 0x0, 0x4000, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) pread64(r2, &(0x7f0000000400)=""/147, 0x93, 0x100000000) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140004004b54dc9bed4e087562"], 0x14}}, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xff, 0x2f, 0xe8, 0x4, 0x0, 0x8, 0x220, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x7f, 0x5}, 0x2000, 0x100000000, 0x40, 0x0, 0x400, 0x80, 0x6, 0x0, 0xffffffff, 0x0, 0x1}, 0xffffffffffffffff, 0x3, r4, 0x8) fcntl$getownex(r2, 0x10, &(0x7f0000000200)={0x0, 0x0}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000140), 0x6) r7 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r8 = dup3(r6, r7, 0x0) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x1, 0x9b, 0x37, 0x6, 0x0, 0x9, 0x4204, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f00000001c0), 0x9}, 0x41, 0x61ce, 0x5, 0x9, 0xf43, 0xa4, 0x5, 0x0, 0x2, 0x0, 0xff}, r5, 0xa, r8, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) 08:48:37 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x5451, &(0x7f0000000180)) 08:48:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0xfffff000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:48:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0xf0ffff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:48:37 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00F~', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:48:37 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) r2 = openat2(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x4000, 0x21, 0x10}, 0x18) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x81, 0xb3, 0x1, 0x2, 0x0, 0x6, 0x40020, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x80, 0xbbc}, 0xc352, 0x100, 0xfffffffc, 0x3, 0x1ff, 0x9, 0x4, 0x0, 0x8001, 0x0, 0x10001}, 0x0, 0x8, r2, 0xc) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140), 0x6) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r6 = dup3(r4, r5, 0x0) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x5, 0x3f, 0x9, 0x0, 0x1, 0x42, 0xf, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0xf}, 0x12208, 0xe8, 0x5f, 0x3, 0x6, 0x7, 0x3, 0x0, 0x10000, 0x0, 0x4}, r3, 0x3, r6, 0x13) 08:48:37 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x5452, &(0x7f0000000180)) [ 1983.408405] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1983.411331] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1983.414784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1983.419712] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1983.423309] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1985.445538] Bluetooth: hci2: command tx timeout [ 1987.497304] Bluetooth: hci2: command tx timeout [ 1989.541594] Bluetooth: hci2: command tx timeout [ 1991.592620] Bluetooth: hci2: command tx timeout [ 2002.080048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2002.081138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2002.174620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2002.176236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 08:49:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x4b47, &(0x7f00000000c0)) 08:49:13 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000180)) 08:49:13 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x5460, &(0x7f0000000180)) 08:49:13 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) r3 = fsmount(r2, 0x1, 0x74) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="022f66696c653000"]) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000100)={0x81, [0x6, 0x6643], 0x80}, 0x10) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x7f, 0xf9, 0x3, 0x80, 0x0, 0x2, 0x1040, 0x17, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1000, 0x9cc}, 0x2801, 0x400, 0x8, 0x7, 0x7, 0xc50f, 0x6, 0x0, 0x9, 0x0, 0xd8}, 0x0, 0xb, r1, 0xb) fremovexattr(r0, &(0x7f00000001c0)=@random={'user.', '/proc/diskstats\x00'}) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) 08:49:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:49:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0xffffff7f, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:49:13 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "004680", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:49:13 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x8, 0x1, 0xff, 0x3, 0x0, 0x7, 0x6880, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x140000, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x0, 0x3ff, 0x3, 0x5, 0x800, 0x5, 0x5, 0x0, 0x1f, 0x0, 0x3}, 0xffffffffffffffff, 0x10, r2, 0x6) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r5, 0xffffffffffffffff, 0x0) dup3(r4, r5, 0x0) dup3(r2, r5, 0x80000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000140), 0x6) r7 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r8 = dup3(r6, r7, 0x0) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x2401, 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:49:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x2000000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:49:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0xffffff9e, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:49:23 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x8901, &(0x7f0000000180)) 08:49:23 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) 08:49:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x410, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x7967bbbf}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0xbe}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x40) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000100)={0x0, 'ipvlan1\x00', {0x4}, 0x7fff}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) 08:49:23 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:49:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x4b49, &(0x7f00000000c0)) 08:49:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x3000000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:49:23 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140), 0x6) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000180)) 08:49:23 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) 08:49:23 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:clock_device_t:s0\x00', 0x24, 0x3) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000200), 0x200600, 0x0) sendto$unix(r2, &(0x7f0000000240)="9bada5df5c50d0728ff308d5b32dd889e823f01c056f62d4e008e1b27419756a1714ab9e0dafd11d688ee806246f56f5586be9989d3ba19f481bfec61062a694d468da2b982ac88489733e8b949e1b26a4c70b3a4c1f068859e81ababaedd6804a926f426a2d659e5b512e6217fb05c7119d260465b4d08bad52daf277a3f05ab947917f9538bea5ee6a65c30f01932de634badf6337c4e5b5291c7fd74091b4fcd3b826e756487d1f4354cfa9ea78c0cee2dc48285749377625694025c52b80061a0e81f2d627500d", 0xc9, 0x40, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0xfffeffff, 'id1\x00', 'timer1\x00'}) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140)=0x81) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="050000000000000002004e2300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200000002004e21e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/400], 0x190) dup3(r3, r4, 0x0) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000600)) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) 08:49:23 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x8902, &(0x7f0000000180)) 08:49:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0xfffffff0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:49:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:49:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x541b, &(0x7f00000000c0)) 08:49:23 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:49:23 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) 08:49:23 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x2, 0x3, 0x3, 0x0, 0x401}, 0x8, 0x1}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 08:49:23 executing program 3: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x56}}}}, [@NL80211_ATTR_IE={0x16, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0x68, 0xfd}}, @supported_rates={0x1, 0x2, [{0xc}, {0x9, 0x1}]}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xfff}, {0x8, 0x0, 0xfffffffc}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x200}, {0x8, 0x0, 0x401}, {0x8, 0x0, 0x80000000}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10008000}, 0x80) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:49:35 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x0) fchmod(r2, 0x164) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:49:35 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x5000000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:49:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:49:35 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x5421, &(0x7f00000000c0)) 08:49:35 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x8903, &(0x7f0000000180)) 08:49:35 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:49:35 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) 08:49:35 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x4, 0x4}, 0x6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r1, 0xf505, 0x0) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r1, r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x0, 0x1466}, 0xafe, 0x4a4b}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x2}) 08:49:35 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x6000000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:49:35 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:49:35 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x800, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000140), 0x6) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = dup3(r2, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) r5 = openat$incfs(r4, &(0x7f0000000040)='.pending_reads\x00', 0x42a400, 0x90) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) 08:49:35 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) 08:49:35 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000140)={0x4, 0x6, 0x3, 0x0, 0x8}) 08:49:35 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x8904, &(0x7f0000000180)) 08:49:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:49:35 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x5450, &(0x7f00000000c0)) 08:49:35 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:49:35 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x7000000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:49:35 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:49:35 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x8906, &(0x7f0000000180)) 08:49:35 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) 08:49:45 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') 08:49:45 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x79, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x211}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:49:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x8907, &(0x7f0000000180)) 08:49:45 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:49:45 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x5451, &(0x7f00000000c0)) 08:49:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:49:45 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) 08:49:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x9000000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:49:45 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:49:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x8912, &(0x7f0000000180)) 08:49:45 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:49:45 executing program 3: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_complete(0x0) ppoll(&(0x7f0000000080)=[{r1, 0x4}, {r0, 0xa08c}, {r0, 0x400}], 0x3, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x40]}, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x20, 0x4, 0x2, 0x0, 0xff, 0x81003, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x7, 0xde1}, 0x8, 0xc6, 0x400, 0x1, 0x5, 0x2, 0x100, 0x0, 0x400, 0x0, 0x9}, 0x0, 0x1, r0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = getpgid(0x0) fcntl$lock(r3, 0x25, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, r4}) r5 = fork() kcmp(r4, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs(r5, &(0x7f0000000140)='oom_adj\x00') 08:49:45 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) 08:49:55 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) 08:49:55 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) 08:49:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{0x6}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:49:55 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x8940, &(0x7f0000000180)) 08:49:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0xf000000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:49:55 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x5452, &(0x7f00000000c0)) 08:49:55 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:49:55 executing program 5: pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40800) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x400, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000840) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) r3 = fsmount(0xffffffffffffffff, 0x1, 0x80) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x42d8}, {r3, 0x1}], 0x2, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={[0x80]}, 0x8) 08:49:55 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x101401, 0x100) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x8a, 0x0, 0x7f, 0x3, 0x0, 0x6, 0x200, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x3}, 0x4d09, 0x7, 0x6, 0x8, 0x4, 0xfffffcf7, 0x0, 0x0, 0x4, 0x0, 0x100}, r0, 0xc, r1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x6) 08:49:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{0x7}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:49:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x1d010000, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:49:55 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:49:55 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x5460, &(0x7f00000000c0)) 08:49:55 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) [ 2059.770392] cgroup: fork rejected by pids controller in /syz5 08:50:05 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x8941, &(0x7f0000000180)) 08:50:05 executing program 5: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:50:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x8901, &(0x7f00000000c0)) 08:50:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:50:05 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) 08:50:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0x9effffff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:50:05 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:50:05 executing program 3: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x92f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r1, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) setsockopt$sock_int(r0, 0x1, 0xd, &(0x7f0000000040), 0x4) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x9, 0x214000) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x8, 0x490000) sendfile(r2, r3, 0x0, 0x2248) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r5, 0xffffffffffffffff, 0x0) dup3(r4, r5, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)="bd64759a68f099d55437f26dc43ae1814e079fc9f091af2ebed6e5a37c5df07c93be075b4153fe005e9cd379a62983a6aa8e5e2f02c662e522cf9852efceb2d9b18db42c0adb44fdefeaa02d30fd46b37ea12e", 0x53) close(r5) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x6) 08:50:05 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00\x00`', 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:50:05 executing program 5: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000140), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 'id1\x00', 'timer1\x00'}) 08:50:05 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) 08:50:05 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x894c, &(0x7f0000000180)) 08:50:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, r1, 0x5, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 08:50:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x8902, &(0x7f00000000c0)) 08:50:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x1c, r1, 0x5, 0x0, 0xf0ffffff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 08:50:05 executing program 0: syz_emit_ethernet(0x76, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c770cc", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "000180", 0x0, 0x0, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@fragment={0x3a}, @routing]}}}}}}}, 0x0) 08:50:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)="d3f3fb8bdb76560f20ec05f03b71a95be9668a16bfb1d7af00d54011136324653a2e1822526a802cf544548bb033e4590a4025cd833aecd0ae44b7ec5c77cbdd429f403845d6b52fc3c67a672c5163a98c6ad38bfa338732dd72233d4141f1b73909920b5cb9a620f5bff07c1ae4ee4f379e45ad8f5eb9eafd5535f188821442b816852ee09aa3d15e9c4359f6b99050d8e810ff4617ae70d1239b50f5867c597c500953825ae410d384251307edab4a1c60a8afb782c940d3dd5d8f10c2822c8d27f6", 0xc3}, {&(0x7f00000000c0)="3e93ff88cf4e20f68f3197eac2b20e0bda50498f9e60522145409b45db0f507626b7019e109c4ebf01ba8c0cc0cc36f0dd4d2178e2819a26abea962d5d5b5ece79547b3a4cb340ae95758428dedeb46233f503a75fc2898f5ed51f69aac6b956afb9cd523012bc3144101a9a56d768ad6b57fc7666841df5f48b01e5e158ca5376de77c680ef225053d29598b2ef5d5c30a16b3451b94bafe8ee500f31bc485bd0def1d847f890fea6", 0xa9}, {&(0x7f00000003c0)="fa2be1b1f1988dbafad1fe69eb8d18272ff5db4e359f8d7ab2266d1b401c9efa69832e3e37774a04c6c700a048ef80dbae72e469e746c2c0f14d29a7143186872b4e507144853d03826bc7868ed953780b5a93538ddebf8f02bb56068f1605ce37b0e2fcf3aa251bd705f5984016510c12683ce8e583afff2351f11d94b03fa65ea0fa577d7afe081cb46e56ef3ce8220676cfa029c83000c2d1e27071cfe95b8716", 0xa2}, {&(0x7f00000002c0)="1da5be87bae2db45effd4c2f3f4ce91c492f8abc575cdf6a44f10db8c7aa6aad79f0a697699e2c69b4d8468f247e1a7f1dcf4ab2b95863f547b3327f3ede50342f420068b2ffa51427c691238d65b46c508d7124", 0x54}, {&(0x7f0000000480)="0ad154db26f06e1f0bd0b432ea5b5cb564e1956ac54c9661dde6dde146aa05e2c3f6cd3ef4b22fc81fe3e345660f9d39f883bbdf33af59e46dfa3dc56cf218634ad4595367a9a66c9bc5b8e5fe338f1a5f4e3b18938707f6913a442d809c50b5d5c67898269bb94d3e8a33f5808a3d6a49472c8afc184a86ce51476974cdbf86e919fe620b5880eb59b6a64a4f19d76d76110149f9e0fbdf6751ff241b23a21aa00b9d90d1bdf898e1fda58e8fd393659dfff6df34aac0ab0554a6750ca8b1720cdcdabfff3d4a263a65d9cdea0f78a11f0689cc1c083dd022af180142e528a0e6f5c09913c6155c68a095b2cb4de0044d8c74108e", 0xf5}, {&(0x7f0000000580)="a5af698eb3a860951a9850a46fd7ef99a96ff8ec33ae1c8aca293bfea2df471ed8d822e444a78ca0c57e7bec412dfa02b9da5d436663a0f96ec4dbaf96bf06a6a697aa6334885ff10c8e1b6dce910b8a85d92e8f7fb8a2", 0x57}, {&(0x7f0000000600)="e48b10af05764b8d9e00de8e323581b1f035447439f88e1ff53eff7f063b43eeeea88d02eaeeeccb04e51beea57e87e842960d2b5682fd18560e30746e077569f5add5f0c168311c77989878c0ec9ffd982c9849524064a5558190e3a930f4f384a9eb65118576a18ca84ae6d9237ca2cd2e8f17a7b3552b6f7e7a0241f2885ee8ec283c262faae965fc1edb2c0c525face86d165fbb4b20b735b6", 0x9b}, {&(0x7f00000006c0)="ddcf18c60fe2663f2499a05883aebe52d336e7fb26fb5162", 0x18}], 0x8, &(0x7f0000000780)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x48}}, {{&(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x2, 0x4, 0x3, {0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00', 0x1}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000880)="6489553c7f07ff89c32cb93635237895d005f4ccddf8930500c3c37d51c2b64fd84f0f06a246", 0x26}], 0x1}}, {{&(0x7f0000000900)=@llc={0x1a, 0x110, 0x5, 0x5, 0x92, 0x7, @random="13492bcdcee4"}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000980)="9ee9577552413a4763aeb25548041e7fa907914f41c173c23569f4f5171dcc03d38ebc58895023cfa4e56ba80c6cc0842fdff9cd88024fe7e984dcf31484074c847e9cb8d272b398b784afec72c581355bf98460e9b7473d102a073be0505757d6915715c13374306f847a9f022e0b894f0b5fc6ffa15fef2cba1cf33f9ad26aa59457f2286d35cbc9b7052f400f7ba324b9f293f0b641877e1ab93d8c2421c0ecdaf102e21fcec5e49e520cf15e40a4733254fbfea04bb8e5c27ed5ed56fc0dfe413fc32e01321d85d02c218e6e63e4a60e3a9b459c4659767fdba97b97efb3561d70414612199a5fc75df595a59631a63186fc22e6f8b98e9b4cf089ecd4b080efbcb171debdf257561ec69168faeca17adbff115454cf7cfd3ea6b715349db8350df7e0a33de426c66ad2921558521e9dbf389f28524934fa351da69bf1b2e89db10edf7969bbbf6788795591e64a2f629474ca383698c9c082419676e51d6605986193631e631255ef7db08ea0ca44ea5da5781c902aef58e2587eaddb4a14a824633c97561062ed08adc5321221b4d52997b63173d2c1f8a86926df161be418b7225d0cad1cd90f7a7c10ebe5975f16464c3c4d36e28679b2793f66a18287b4d5edc679376a5f47dc610f2a270bd35da9867b61cd290390845a22648f73f2b544385d71f201b255d5be3c674c5e52d27bd8011536c52d1f0ee747ece138f781511c22ae6e42c26f02958beb13383ad62c3cb87068801e118d54e90afecbf19647b8f8a5595593407a8f686d650dedc73caf3ef79aff861ca116c795e2aa10f2e9e321886f4e2aeedafd099e2c0ebad0b27b2229a5378aa338bf8adbcc853486d7e7b5047f9a477c15ca46b5f58e24f754da22072654cc074a069a7c9274590043e7f59bec350f5b01eec43f310a290e76ac668b7f3f943fe11d32cc7e969f518dfc096ac92a5770e51a2fa71471156879a0daa54abd46e04b5bcc6842bb29b62b077fb17ea5660119b5a74af0f08de77bd48e256863257b3b1cfbe295cda02a4fd1f4b02d96e108c0c46a9d07b42de54834ee9ef8701b6b9261e35e28383943d55ef8cfdb1a637f2c00458890556a4b7c50bd6e6653044044f0eb88f9117979995a3deb8eed514b321cc24cefa5da2c328d553efed0d46fe9f5265821bc2a5d0982c25791f9c7e41136bc5ec689dc97ee0bc91942fee976df64eadd4facfe7681245adf1bfd8da869c92884c76d000f86e93b0ad4fc978622cde07a52adc332ee347e60eb4c1b37d9dd1cf3ceb1121938e21048e520304478a78ab6f119a8db1d5625cf473ea61db837ae1917adf834c55734400293ead9b17b9014c57b76adc90d04f9085d12355efbea6d3286a6865ca42310db6dfd4959976282940599b24ab76ce435ca512d28004e0d0349a2c9c206036783ee8f8972e7a480b8eccce408a6419cbbd28096e7a34cc8f5874f7f9011ab2eb2629416f86c67e60a18093f3943c9f5d8c69be1a1541a1294cc6e220015bc0b14927ed5a5548052c0e15a1e648ffe4740b125a92d265c73b7738ea6360a98f81dbe19d6cb59239e96bd0a2db411ba385c046eec0b6a50fd158a832bb33995c2603a0e1bfd53d42750b90447c87f8e955f673c12158b3a45874075ffe22c2b18607269bc4ea073fe9edfa3fbfd5a6b7f960f0f0a428245b6c5abe95b563f7fcb06d1e2dfdc43137a9e4b34cf1b7a5cb4da4a1000a4f73086a3e973cb88ec142a4dd4655d3cf9777de28b86e96e51401045ebc8fe381ed7938dbe130f5eb043eb24ca09334a5acdcca4a39a2fc6cc70cd92da5e74a3a28eb9f2ce544685e24b8b5a01b2cbf2b40b8f841f3e7b860fc229d41963adcba0b757d698ff8514c7683258fe42d7fd9d36b0e034f7bdf4f4c6e9a1f59b3f9a0ff28806edc7a352532ef7b75c1cb80b118485abf0b764042eda7313803e46d610e1b4f30009877e717f218b6144b2dcf7f2490e8f041c85f02523b0b2854138bf9fc3cc2ae536d41dbe8d6534d625073ce35c01b29d7e81a484bd1128567af20aff39877a769107c673ad7e8085ee6f2c5f9563c3226b80b11f9bc8947a4ba805c8dae89f5bbbb8578530b071d033cd84728333671c6100064dff76680c3f3b58ec462ef5a4bfcc7e9a2531753041a6c2d4c8ad3699306584808a2acbe7c26bf973e57a9cd76087fb0c73607db410f034b65334687b1e5389db53e96d3711c6dc213d152aa69a1faa209e97d162bd452d224c5c6f4a4a3c81ac9efdaa2b6bd84bab3afa82febac4f85c49d8307f0d263e8faa74d3d1cf4993f0e9c938f3035c58d97a0cfa6f4776b05d8dd5a79737b23df6ecccfd4043ca486658e72742e607f70a87167db2043242fb3ab52e872a96b9115fa5274849c5d364fe3e8bde044b64af9ad09059d3891a9ca27c2bfe21d416a895f791a82aa3c2ffd0b1ec6c9159bf29741fe6efd5a5157480d6d7b0779e7d2c1893ece7233a47ece498ec83e5be08c9fac3a967fe8e2b1eae72e0255ae0ae578a25d1f1a11937fe3135408072c3ec7899749691ef70e54f875c0cabc4067e731231af6bf3dbe3afe6bd717d580821ba5a3da734040b67b329284fca740a3e5904c99c1414ec5fbb66895fd09adb1cc1b00a707ea8fb806dd16807de76c6a5184fdd95b2c48735c5ee2437a523b0b4f78178c91957b1941f4aea7c03e5b867e75e994b75f65738da31a6395563d76995cc84cc82550a337bbf562afe3f843da7eabb0e3ba6f8f82c9d2f506d213a8842184c6ccb9b9df3cb1c5b5a44ea15d0e95a8b87f45e02648db023ba71d531b6ca9b950119269c23e38a31f69f49884c083803230374c6ca3824325b19e9373e40f9437822bc41f8d452186e128b22a265cbad6128e9a213e930d6c85b1764dfe8df049c63f8688de47cb1bb2ff09f2281db5d970211a18f80181cd75853c9ce595cb28c6a244a60135f588ea44bdc7ba4eec15a09340a59672a92348e06cdf78588f96e5be0928685ecdcb9a0775db0e56ee6a3a0e42d7b0b979d4fca49703a8a93ecb4f539c094a8266bd848955766082beaf4e86ce08de809b7228ecac2daa5fd883fe594a177d7710308f69b91fab5f13ccf17bfd6b7d1786a8295d68a3077a26cbac8ff9f544205ceaf5e9360ca33b7eb1e3b142e8ddc95544f5ea042ef4af655fbcf6a0e60f16357baf1231327a29799d644e36e037bcbb273dca64092d31fb5b62835b7c204ee53ba86afa3499de5218bc2e890a5f713ddf7735ef0d23d355c0635b2033fb5655bd5ea2f2d0c74df71acc707bb675e96691e4c89afc897a1c24c6da727151057f0cc4ef6d0f6e6ec4999b0a56c3744ac4cdc746353a6766898285898602807da0ab78e6eb42482ab5aeb10751790b7ba2c5d2c6463d54a5905789310c97c0367a44814d0c7e34cbc4258a8d01c6f7b6697e93051b612c146d31ff8f4d494b61058829798091cde6f999c53d2f45cde60d1d4a3d2b752aabf61bb77123f43893a8048f95b7ca37f55371e7e4f346443663c73d20e48574bac810476eda94ed7c712573416072a4de441cbf126a3e891979dad1dc88da8f426641b2b4f16e9c2d2f5b1b361e4e87d8f2df05d202ee460343fc0dcc138e561ea51ec2660dc5bc1526d21e1882eda2dc8bc5064371691efd820cdaa1be5f8a80ae18ad3632a9ef28f8c0867d5d5b8019bc5c5c133715f3942b309b6863511ef29656c55f19d40895d1a5f679606b87123cac011fbab4959dea265cff34e9d038648bee47903fc0d69765c4dcb87e5b1a7f1078a34a04a951f3ffc9cdd9e2040ff48ad7cf33130cfd3f43c340ccc5b0082a1dc53034d3cbe4844e68864908ea4d8ddf57de6587a48ba1a724b00839dc09163029fa48e4bdb26894a91699507366b092d583ee4dd8bae3e85092a75518336a16971567a91578feaa022f7f1ad27d6232760939e7a5a95a09448aec2439930f57bdb0206e8622c548a873d915c8aea49f5f0fc7570e92ee39d543c8b6b9d4c098d0155eeb8f015a1ccc1237878d182c38bbb739808f4479312f0bd43878f41e0256d4166a56aa50369afa868a9d7b651edfb79f6764e8cfd3ab959cfd2f611b52854e597945366548dbd586843edce2aff72143b61afb5b48d95fdffc27d74330fc59fe061927688c2e5fc931e8773f45eaeb149b0a185ec8df36dd4850d8998f952e92a75dc1caf69a088b343c498abfa75b42c5516c900d3553d89123afec3ed6a94761034751746d6afd6cdf7c509f613692191b27f6f9d1a594de2c379c3b2fd75ae5f4423976fd6bf3c369856559a5d46eb31a1af1181392b14d01cc17277f954f07cdb2b6a436700016d02fbeb6d8e1a469022e2754de604e110b1c208c8452461b8d625a2b6ac9d93d7181e517f7aaaa3c680026dd6e3c94ec65d124db5b25f5b2a9f92f5b1db7e6637aef35d0c74842b29786056b6ca9391e53804a7ae0e295d57aa8d4dd9fbf13f30bd48fddc89304158e7c1883516eb32950baa1e8e3789a52b3acf825fa87af5a8cd5eff0772ef3ed3f01f7ef098bbb495ba4c39b692201183f3548fa214287ec4af73f5eeebef29b3d3f77b17ffa64025668e59bdf521fd8534b92fcfc7a3da8d9982bca8676e91837aabd164115d948775e8cc942bb4b3b7b1f27c0b7bb97a8de10c2640a52ea57d32395fcc7ca31b3cb93a33a99dab82aa7ae69599e5c9bab8a8f9b6ef5d52ce3837f59db644ea9dc1fe66fe8b121c6521b6ab2c07b77b0b177cbbef61072901ec6714aaabe021ef170db987c3d6f53cfb556aa38fced476759c803aad4851dab6bf40263d5f9ec1ff68a46f380e7b6c8d56cceadef45bf01ccf81fa97ab839946868e2ba215865ddc7dc6d5ff3277e9326e888e49598f640318cf36da01cf919a72cde2721cec0284e9ae846c48d995a878f3882e9800648b4b0b39342f88965f10f08e48fce3fb75d5649c4ad483847d1a2885387068e92ef3908eccd23182ad3ae846c4ccc7665702cc91824747cf24fa026db761a57c1cfb69467b457464553c9d7f6f784f3f88177a067829cfa48299e2a2ff542fe6dfd56534a85dc90199737abaead66edbf5b76ce72184d46303ae4f3c74651ab79487085c11f434ae18a125494760045ecf90406dedd6b588460fff84816b1c58876e6353e509c126deaa66ebdcbbe2a492370ef8340238cdb5e22a838d3d610bc4fb5412fd53540b8e70cb1ad1e2d56ca1ded8493fbc0c3c6f6c2844d73fa95e75facf464faad63e6935dc5f7113a755c1166584e93a5df9312d687ebdf08324b17846baf9f074030d08cfaa53c129e69c8ff3ba485e8ce041ed5dca8a3a3b14b8bdd341267b16dc6b3fa25e9c23a3fef5d9121fc556785cbc7dbc47ef3fc16f33b501d30472851bc04379f20572153a3668351fd89b57f858a9cc409498f714eefc0d69f1685382787914faa1a695544c6d2f2229ca5b4e3553a34a818db1fc747774144e8f1658ddae80b34dd1faa22d7c549c88c5a8eb5f0a1d31c501db9240dbb781121c7c33bb7f6fcb0024865912c1a10cf0918c6ba0c440ffd1a5759b4d8cedfe5686d17105ab80e0c778da220a2afadf241ab976c23a9dd2d14deeede95dcd3a5169bef8a48417d424f92ec16b2e82921c45e6d193d3d86b2d46891df1415113cd3a1414b97153a5de5bb2838c55e77fc9745c0259daf3ad9eafb145b51e898a65ccf7d266cf18ffe0109718927f92d2739d64484af4cdecb72b87a716c410ec2195e712cf8a5f2f64dc414659e1396d1c", 0x1000}, {&(0x7f0000001980)="94b4cca78b06d6a18641a26a4f6132b7084938143c77936ce95298573d74ecd19ca0ff4d6a0a8fc347ddfcfbf45b", 0x2e}, {&(0x7f00000019c0)="1e9a671649f308fe4109f65c965f3a52e01c3714f34d169d97c2cfe2fc2afd28fd8a8da9154063a9bae12fabe2c0fecd9d216f1f2f0a652f77f64a69ba9225df1b7f2bd640816a52ba730e832be9d42054e7f445e22f6faa12870bd459c9d118e883e433d6abbd7d2acabb1006f20407a308983f4152b62fcf82689bde6bc57bf9bfb4260feb1c5400", 0x89}, {&(0x7f0000001a80)="0608caf6e4f5e1e33f66767ee167e5d21e80eb7225", 0x15}, {&(0x7f0000001ac0)="731b53248e68c9477108673e8f14ef3f896f0c1261c5e27d49dccd7d26533fff5f8048bd7c49f9267e8f194037081c20e700f3be9f9c335e91e11636635e2068b5ec733079fceac8db4173a46613c24e788b4c2abc93bed2535057103ffe9b700d08859d59fcc1516cb70985466689a7d8b827beff150d69e1b21f7ecbd322a92a2d847fd3b79b6b39f583a7f43d1e25", 0x90}, {&(0x7f0000001b80)="5fb624d397ff653978e298c315b48457d35e9a1f14c409c879826501b9873cf5e2c7cfc29e9983c783a00835c640", 0x2e}, {&(0x7f0000001bc0)="feae0fd17d4429dc351949e60f68eb9834abddd78c3aae83776e08bcc69a6478d1db73f927490c89bcf9905a9cab38a842fe900be7780d7676c4bd59be6270a078c18cff8b9443250ff8c7127e6005b0f2c8b933056aadeb556339e96e4bda3b94f3e227631a6fa156928085887d728a0e8f17333b92498b93dde777d26a8d48a61e65a7bb933af02a10fccf1afba291ba0461b6bfaea842bc66f3d3e6901ecbbc8f075c379c9b4bdd2bb6c6f8b41f4aad461d56397f8793e475cb65e81f1108f86d32ec711046d44b725e2880cbb3c5213d06fc9df0fdcce0087996b90d1381f80e624884d002d9772f02", 0xeb}, {&(0x7f0000001cc0)="cb34cf5a8f7b61cd92e613ea7c4aad903a37ebbe2b58fdd4d6a89fd81d28145721f4aece910cfc7b6c2667c3c35f267211a67a6456c0988a074ca4e68e38c62bcadc6e1b452d8b4d292809e7d0d0db07fef31c5182bbf5bb98615e6a0a9f892d0c83278496e5c95dac2ba9f42b9dbd3bde2f7badd8c02609", 0x78}], 0x8, &(0x7f0000001dc0)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xf7}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x90}}, {{&(0x7f0000001e80)=@generic={0x27, "8328a6065fe6efa070eb6e1f30fa844bd3bf26ed3757aca57d42f2a27f919f0c5038051ac29f1d2a154740729b93a66d9ce653bfbe9c0096b266dcdeb1a42bcbc3cd8746aa326bdb1315f3fc2dc20c05e13e109563dfa257f2220538cf15b6e0b699dce041d812a010d62a15253191acfb326b52d84c9d915502d44e394c"}, 0x80, &(0x7f0000003440)=[{&(0x7f0000001f00)="52a17bc282475698d6f5ab4939cb017f22606386e8648855d2c8cb4dfc", 0x1d}, {&(0x7f0000001f40)="03e9e467fb42bc1eff28768e300a3653c6ab8d0aa0570dd0e9c5c2deef1c3fbd3f396a93314a23e6190a323756132af239e244f2da3b06a9d413db598465fad48de9bffdaa6915a09d4b8531f6b60aa0b25263f164553ba94d1471559f8c95497bfff13dce7f884fe962303d8b7c186ccb1558ad011fd0f11f11f9b3b7513d6c12439b909613c81d2e377274c7706aa8a670551fa2b393b9cb812baadaa82f2fde539c8378691df32584d00ad38657077871bb2f3bf60eb785b63224c3c48fe65352c9d2763d8240d1f55f1c1318523428", 0xd1}, {&(0x7f0000002040)="d998c5f575c36b4ee8e67bb9ff374e17037a7414dd47a67ee5981d51f19e14daeb02130a5ef732b146d6bcff4c0369dd1da2729bd7cad62d95802627aa7a19e735a1ba8852cf83050991d7c93ad9950a544de84808d584ee37ecf01565de1187bc45a245dbc7d9c343528e9618a1a5075101ad17504e7732191df0012031cf4d357195df7c0c67ca5f810333c8bc", 0x8e}, {&(0x7f0000002100)="405c399d6965f31195482dabd96afcdd57ad95d211e6c62354d9c497740a844bbe5baf209bbfd274dd5bafbd06313e0bd13842c7ec3401345a990011077b0eb01357652b9015d0c816adb85c5fc85daa56b20762d510c18dfc2d5d675e605b9f27652ee8803b7df783eb7c1eaafe6f4fb83024bf62946c6c4c1d6cf7c7dc96a420d93890096ad8ebce393b789b38e5ca695652c582737242b22064fc240af0ed00f60f372004379384e751632ba5c1cf3fa7aa6bec81b7e32e5d0768838db9f70bcb", 0xc2}, {&(0x7f0000002200)="612f013cfc2aa28676265f5721378154ceabfb420943b7e0a193ce12dd783a8611128e45d2b1f77c288e6bda5780e01b9b74883feef3eb0499cb8ff28f9508f39a97d595d5cadf56c6da8acf1146ff5f47550f51528766156d9b47003ec6a004483dda4d4613a7dc67e4bf51682fc2fbf444376eb2e8997c03dba82072d58d4d1e2ab8", 0x83}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000032c0)="e617c72df8bf65cc802e067dc7268e4f641bfb383e285f32bc4d0e2c55d220071a386fc07bf9284654e22ef34377956e545916bebe2295eb4493455a2ca46a633123032fd469cc4c38698d4d3c402968e59a69bebec1a1ee7db48eaed8420ee0680903fe2d7393ac7c76b31ce50d4d21d435149eea67dce03f6ee7659939474d4d5bef5e913c58b1cc48e3789de26d358593060f9f4f51981cc0a55757bebc26d815db02d59dfcceae3b6626cd601e7eca5ec6048cb65ebb814302f1ce1856cff48b99e0a45c614fd12b0b203e8aba2c", 0xd0}, {&(0x7f00000033c0)="36b4811cbc89cc31fc5cad6b577d9bf5a29935a25ff4a76fb95d4f3df67a72e94410356345d8891f200da860aae3ec8e27b6ca46843d1c5222f5c2cf8c0da26387953ea022d325e26aa0892b0dd7f6ebcd51fb24f398208852cf579717aee9176a3ef41f121b242fb6ef6c686692", 0x6e}], 0x8}}], 0x4, 0x80) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)=ANY=[@ANYBLOB="e50000000124d103bb000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB]) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000180), 0x9a, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x6) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000080)={0x4, 0x1b, &(0x7f0000000040)="ee4e1de3b156c937d945388c6f386fc82bf5cda7b2d1b1774e3c53"}) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) 08:50:05 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x8982, &(0x7f0000000180)) 08:50:05 executing program 5: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x3, 0xfffffffc, 0x3, 0x800}, 0x2, 0xffffffff, 'id0\x00', 'timer0\x00', 0x0, 0x8000000000000000, 0x5, 0x1000}) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x3f, 0x2, 0x0, 0x9, 0x0, 0x0, 0x80622, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x6, 0x5}, 0x40000, 0x8, 0x7fff, 0x2, 0x80000001, 0x0, 0x3, 0x0, 0x99, 0x0, 0x81}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x2) 08:50:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140), 0x6) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) dup3(r0, r1, 0x0) ioctl$sock_bt_hci(r1, 0x8903, &(0x7f00000000c0)) [ 2079.480617] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888015efc700 (size 360): comm "syz-executor.3", pid 16314, jiffies 4296736040 hex dump (first 32 bytes): 00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00 .....N.......... ff ff ff ff ff ff ff ff a0 9f 6e 88 ff ff ff ff ..........n..... backtrace (crc f22fcd7c): kmem_cache_alloc_noprof+0x2fe/0x3d0 alloc_empty_file+0x58/0x1e0 alloc_file_pseudo+0x12b/0x220 __anon_inode_getfile+0xe1/0x280 __do_sys_perf_event_open+0x18cb/0x2c20 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: memory leak unreferenced object 0xffff88800c3e2e00 (size 16): comm "syz-executor.3", pid 16314, jiffies 4296736040 hex dump (first 16 bytes): 01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 35cdddfe): kmem_cache_alloc_noprof+0x2fe/0x3d0 security_file_alloc+0x35/0x130 init_file+0x95/0x4c0 alloc_empty_file+0x76/0x1e0 alloc_file_pseudo+0x12b/0x220 __anon_inode_getfile+0xe1/0x280 __do_sys_perf_event_open+0x18cb/0x2c20 do_syscall_64+0xbf/0x360 entry_SYSCALL_64_after_hwframe+0x77/0x7f BUG: leak checking failed VM DIAGNOSIS: 08:50:21 Registers: info registers vcpu 0 RAX=000000000071eb99 RBX=0000000000000000 RCX=ffffffff84ba1147 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c3484 RBP=dffffc0000000000 RSP=ffffffff85a07e00 R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001 R12=ffffffff86439650 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84b9fe7e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55e4000 00000000 00000000 LDT=0000 fffffe4300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffc5fcd8800 CR3=00000000175da000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004179791980000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000a9f6cb RBX=0000000000000001 RCX=ffffffff84ba1147 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c3484 RBP=dffffc0000000000 RSP=ffff888009717e58 R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001 R12=ffffffff86439650 R13=1ffff110012e2fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84b9fe7e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56e4000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa2fead81f0 CR3=000000000ba8d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=2930363320657a697328203030376366 XMM03=3120646970202c22332e726f74756365 XMM04=202020200a2e2e2e2e2e2e2e2e2e2e4e XMM05=30302066662066662066662066662065 XMM06=203030203030202020200a3a29736574 XMM07=642078656820200a3034303633373639 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000