0x3}, {0x3, 0x1}, {0x3, 0x8}, {0x3, 0x4}, {0x6, 0x2}, {0x3, 0x1}, {0x1, 0x6}, {0x1, 0x3}, {0x3, 0x6}, {0x2, 0x5}, {0x4}, {0x0, 0x3}, {0x6, 0x2}, {0x2, 0x4}, {0x3, 0x1}, {0x2, 0x2}, {0x5, 0x5}, {0x2, 0x9}, {0x1, 0x6}, {0x1, 0x4}, {0x7, 0x2}, {0x5, 0x9}, {}, {0x6}, {0x0, 0x2}, {0x0, 0xa}, {0x6, 0x8}, {0x2, 0x2}, {0x5, 0x6}, {0x2}, {0x7, 0x9}, {0x2, 0x4}, {0x7, 0x9}, {0x1, 0xa}, {0x7}, {0x0, 0x2}, {0x5}, {0x0, 0x6}, {0x6, 0x8}, {0x7, 0x7}, {0x6, 0x7}, {0x5}, {0x4, 0x7}, {0x1, 0x8}, {0x0, 0x8}, {0x2, 0x3}, {0x6, 0x7}, {0x3, 0x4}, {0x5}, {0x5, 0x1}, {0x1, 0x7}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0x1b, 0x0, 0x12, 0x0, 0x1c, 0x6c, 0xb]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x31, 0x3, 0x4, 0x1, 0x400, 0xbe, 0x2]}}]}, @NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x30, 0x12, 0x18, 0x18, 0x24, 0x36, 0x12]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x24, 0x12, 0x1, 0x9, 0x4, 0x6c, 0xc, 0x18, 0x0, 0x60, 0x4, 0xc, 0x48, 0xc, 0xb, 0x24, 0x4, 0x1, 0x18, 0x3, 0x5, 0x36, 0x6, 0x2]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x9, 0x4, 0x24]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x3}, {0x5, 0x8}, {0x3, 0x8}, {0x7, 0x7}, {0x4, 0xa}, {0x2, 0x5}, {0x1, 0xa}, {0x5, 0x8}, {0x1, 0x8}, {0x6, 0x1}, {0x5, 0xa}, {0x7, 0x2}, {0x6, 0x1}, {0x5, 0x9}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0x1}, {0x3, 0x8}, {0x1, 0x5}, {0x7, 0x3}, {0x1, 0xa}, {0x7, 0x8}, {0x4, 0x8}, {0x3, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0x1}, {0x6, 0x1}, {0x3, 0x7}, {0x1, 0x2}, {0x2, 0x3}, {0x5, 0x4}, {0x7}, {0x2, 0x6}, {0x0, 0x4}, {}, {0x2, 0x6}, {0x7, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xefce, 0x7, 0x400, 0x4, 0x400, 0x20, 0x400, 0xe0]}}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xacd7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x200}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x2a4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xb0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xac, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x24, 0x1b, 0x7b, 0x36, 0x16, 0x18, 0x4, 0x5, 0x1b, 0x3, 0x9, 0x18, 0x60, 0x0]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x7}, {0x0, 0x3}, {0x6, 0xa}, {0x6, 0x6}, {0x6, 0x9}, {0x3, 0x1}, {0x3, 0x7}, {0x5, 0x1}, {0x5, 0x2}, {0x5, 0x4}, {0x3, 0x5}, {0x0, 0x3}, {0x3, 0x8}, {0x0, 0x3}, {0x2, 0x2}, {0x3, 0x7}, {0x2, 0x5}, {0x4, 0x1}, {0x4, 0x2}, {0x5}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0x7}, {0x4, 0x7}, {0x4, 0x2}, {0x5, 0x9}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x9}, {0x3, 0x6}, {0x2}, {0x6, 0x7}, {0x2, 0x3}, {0x4, 0x5}, {0x2, 0x2}, {0x1, 0x3}, {0x1, 0x3}, {0x4, 0x3}, {0x6, 0x9}, {0x6, 0x4}, {0x1, 0x5}, {0x0, 0x7}, {0x1, 0x9}, {0x1, 0x2}, {0x5, 0x9}, {0x4}, {0x1, 0x1}, {0x1}, {0x5, 0x19}, {0x6, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {0x6, 0xa}, {0x1, 0x9}, {0x7, 0x2}, {0x3, 0x2}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x9e1c, 0x5, 0x1, 0x1, 0x0, 0x7, 0x200]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x35, 0xffff, 0x3ff, 0x7ff, 0x5c8, 0x9, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x8, 0xfff, 0x6, 0x3, 0x4, 0x3f, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1dc, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0x9}, {0x4, 0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x8}, {0x1, 0x6}, {0x0, 0xa}, {0x2, 0x9}, {0x1, 0x7}, {0x2, 0x9}, {0x0, 0x4}, {0x6, 0x1}, {0x7}, {0x5, 0x3}, {0x5, 0x4}, {0x7}, {0x3, 0x1}, {0x2, 0x3}, {0x5, 0x2}, {0x2, 0x9}, {0x0, 0x4}, {0x1}, {0x7}, {0x4, 0x8}, {0x0, 0x4}, {0x7, 0x8}, {0x0, 0x8}, {0x0, 0x6}, {0x7}, {0x6, 0x6}, {0x5, 0x1}, {0x1, 0x3}, {0x0, 0x4}, {0x5, 0x6}, {0x1}, {0x5, 0x7}, {0x4, 0x2}, {0x4, 0x7}, {0x3, 0x6}, {0x0, 0x6}, {0x2, 0x5}, {0x1, 0x2}, {0x1}, {0x3, 0x2}, {}, {0x5, 0xa}]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x3, 0x9}, {0x6, 0x8}, {0x5, 0x6}, {0x6, 0x9}, {0x1, 0x1}, {0x0, 0x4}, {0x5, 0x9}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0x9}, {0x7, 0x7}, {0x4, 0x8}, {0x0, 0x2}, {0x5, 0x4}, {0x6, 0x3}, {0x6, 0x4}, {0x7, 0x7}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x2}, {0x2, 0x5}, {0x0, 0x9}, {0x1, 0x2}, {0x6, 0x8}, {0x6, 0x6}, {0x6}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x6}, {0x4, 0x4}, {0x5, 0x7}, {0x0, 0x1}, {0x1, 0x7}, {}, {0x4, 0x4}, {0x3, 0x9}, {0x1, 0x8}, {0x7, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1e, 0x3]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x3, 0x8}, {0x6, 0x8}, {0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x1}, {0x2, 0x3}, {0x5, 0x2}, {0x4, 0x2}, {0x4, 0x6}, {0x3, 0x1}, {0x4, 0x6}, {0x0, 0x4}, {0x1, 0xa}, {0x6, 0x5}, {0x3, 0x2}, {0x5, 0x9}, {0x6, 0x3}, {0x7, 0x8}, {0x5, 0x4}, {0x0, 0x6}, {0x0, 0x6}, {0x2, 0xa}, {0x2, 0x3}, {0x2, 0x8}, {0x4, 0x5}, {0x5, 0x8}, {0x7, 0x8}, {0x0, 0x5}, {0x6, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x3}, {0x0, 0xa}, {0x6, 0x9}, {0x5, 0x8}, {0x1}, {0x4, 0x9}, {0x3, 0xa}, {0x7, 0x2}, {0x4, 0x3}, {0x5, 0x4}, {0x3, 0x3}, {0x7, 0x2}, {}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x2, 0x1b, 0x1, 0xb, 0x24]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8000, 0xfaed, 0xb5, 0x89, 0xff, 0xcb, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b0d, 0x7ff, 0x3ff, 0x1, 0xfff9, 0xffff, 0x6cd, 0x6d50]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x56c, 0x8, 0x5, 0x0, 0x8, 0x7ff, 0x7]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x19, 0x1b, 0x18, 0xb, 0x1, 0x0, 0x4, 0x5]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0xb, 0x34, 0x9, 0x6c, 0x12, 0x5, 0x0, 0x18, 0xb, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xebca, 0x3, 0x8001, 0xfc01, 0x800, 0x7ff, 0xe457]}}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xb, 0x36, 0x24, 0x9, 0x36, 0x4, 0x6, 0x18, 0x12, 0x12, 0x12, 0x36, 0x18, 0x12, 0x48, 0x48, 0xb, 0x16, 0x9, 0x30, 0x24, 0x1, 0x1, 0x4, 0x4, 0xc, 0xb, 0x2]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xb, 0xb, 0xb, 0xc, 0x12, 0x48, 0x60, 0x4, 0x4, 0x16, 0x9, 0x7, 0x60]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x8f0b78a1a95cad7, 0x36, 0x3, 0x12, 0x3, 0x16, 0xb, 0x3, 0x60, 0x30]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfff, 0x1f, 0x80, 0x52f3, 0x0, 0xb2f5]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0x3, 0x6a, 0x5, 0x16, 0x72, 0x3, 0x13, 0x18, 0x4, 0x6, 0x4352195d918aad2e, 0x70, 0x12, 0x11]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x61}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x84}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xea}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x71}]}]}]}, 0x21c0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="08002600a8090000080027000400000073ae470f8728038fb5aa1c432d8092f84ec5064828e614101840bf58fad38c2e9f567a45daa20c19abe9f9a01ab31fa3de026e94f8609fc65ed349941a5f5dfa999181b996730630436523b38e46b78375760e00007b5064b4fd2697ced294f8f41424809fff1c87e31d6ad3c4ff2cf982c461efee759497c51d2fc2f377f5362f7b5188f226e808741af35226cdd4a32f69fb7662eec17df3ac3586ce6d85e24ae45141b39babc84c79431e81f1626ae0fe9604e9e77c18adf600a1ce03009dc6ac661555"], 0x2c}}, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)=0xffffffffffffffff) syz_emit_vhci(&(0x7f0000002840)=ANY=[@ANYBLOB="042f10297f99b28cc5fbf7d2bed258715100ac920fc9118edc30b1917e5de14acf9743b1f7112f46b12035423012835d90dec0957e5f1df387"], 0x102) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r9, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x3c, r1, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "bb01005769f91d2d6210217be1badb66"}, @NL80211_ATTR_PMK={0x14, 0xfe, "efa995d894bd1c1aca4f324194354f79"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 11:57:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params]}, 0x24}}, 0x0) 11:57:26 executing program 2: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="57c2939aaf375f423340039adf711ea41c8c33625f555ab3e1c830f3127788bae3ba6a5706091533dfd929b2d6468b723c16d1386f8d88743ce0b8ac093eae461e3b2549e327895b070aab8e91df5fb9ee5b2e114522d93bed34cda0c52ac5523dba46bab90089fe0d6dd9a55a528c8b2f0a6c6e6b49fde4c5a3377684ad793a86feeff48f2ee41127ee77e525804ea69182c59e425062735c9e5749c82cdf7a76de96d9561de8b8cac3d770017e5d2463226b"], 0x102) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x8, 0xa}, {0x401, 0xe8, 0x0, 0x5, 0x100}}}}, 0x17) 11:57:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000140)={&(0x7f0000000040)=""/193, 0xc1, 0x6, 0x80000000}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9ac8}}, './file0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="814dea2a2288000000", @ANYRES16=r1, @ANYBLOB="00042cbd7000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="080035000100000008000d0095090000140017800500010003000000050002000f0000000500a3000000000008000c00640000000600960006000000040046001800490004ac0f000dac0f0004ac0f0004ac0f0008ac0f00040044000400cc000400440008000d0008000000"], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r4, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040c4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) 11:57:26 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00`T\x00\x00\x00\x00'], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) 11:57:26 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x6) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0xf6c5, "cc6263", 0x0, 0x7}) 11:57:26 executing program 4: setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x9}, 0x8) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) [ 870.570185] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 880.308438] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 880.404431] Bluetooth: hci2: Malformed Event: 0x2f [ 880.433422] Bluetooth: hci2: Malformed Event: 0x2f 11:57:34 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'security\x00', 0xed, "4e57ebb2ec89eeb6a5989cb729dec48f55947f3c18ecb2d3b59b2bb044f1267bf881c798df7681bca87e46574dcd3efd758a5c611f523bb647207a4446612b6c9794cdbb46d66b95419ab9289469f292a8792348ce251834e9451e7eed21c62a1238ae3328d2916a6c8a6d71353dbcfd1c689182b22fe847b9d4bfe793ec9a4c39f3954f4a60fb2b137e9f8f6bedc705cea805658e4b83f7664d10d67373b99a79d32cb02c6ac7a01311781e41b3bbe01f501f95e63211d23b1c7fd91845a0fc655b065f9d0c43ea06548326e03e49521c746992f47391a1fca8c25fdf5b5a9fae1fca27f58dc07b9b20401e6e"}, &(0x7f0000000140)=0x111) 11:57:34 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043910297f"], 0x102) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "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"}, 0x1004) 11:57:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params]}, 0x24}}, 0x0) 11:57:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000140)={&(0x7f0000000040)=""/193, 0xc1, 0x6, 0x80000000}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9ac8}}, './file0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="814dea2a2288000000", @ANYRES16=r1, @ANYBLOB="00042cbd7000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="080035000100000008000d0095090000140017800500010003000000050002000f0000000500a3000000000008000c00640000000600960006000000040046001800490004ac0f000dac0f0004ac0f0004ac0f0008ac0f00040044000400cc000400440008000d0008000000"], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r4, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040c4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 11:57:34 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept4(r0, &(0x7f00000000c0)=@sco, &(0x7f0000000140)=0x80, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0xbc, r2, 0x800, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x41}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3d, &(0x7f0000000180), 0x4) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x102) 11:57:34 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000004cc0)="80c1b4701b33df46eb30bd0d4cabd36a9021162d279b0e057caf9429b2e44058ef376a04f754f46f2e39eb6ed4c6d9f1dcb456430e1d293797b705bc2a8f4d70bf91a050ec6c694953100ce93cb02f0955e704174f10d9177abf51bf6ca129efe24f9f37369cd1455be432d01253550e5aa6f76f9bb258d7b9d13034c3fcfd404782785f2e078f298ef0bfdef17edf935a87e4") write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r2, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) clock_gettime(0x0, &(0x7f0000004c40)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004a80)=[{{&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)=""/162, 0xa2}], 0x1, &(0x7f0000000200)=""/133, 0x85}}, {{&(0x7f00000002c0)=@ax25={{0x3, @bcast}, [@remote, @null, @null, @netrom, @rose, @default, @null, @null]}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000340)=""/196, 0xc4}, {&(0x7f0000000440)=""/29, 0x1d}, {&(0x7f0000000480)=""/80, 0x50}, {&(0x7f0000000500)=""/240, 0xf0}, {&(0x7f0000000600)=""/61, 0x3d}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/95, 0x5f}], 0x7}, 0xffffffff}, {{&(0x7f0000001740)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000001a40)=[{&(0x7f00000017c0)=""/244, 0xf4}, {&(0x7f00000018c0)=""/176, 0xb0}, {&(0x7f0000001980)=""/109, 0x6d}, {&(0x7f0000001a00)=""/12, 0xc}], 0x4, &(0x7f0000001a80)=""/109, 0x6d}, 0xffc}, {{&(0x7f0000001b00)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000004000)=[{&(0x7f0000001b80)=""/224, 0xe0}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/155, 0x9b}, {&(0x7f0000002d40)=""/5, 0x5}, {&(0x7f0000002d80)=""/71, 0x47}, {&(0x7f0000002e00)=""/202, 0xca}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)=""/230, 0xe6}], 0x8, &(0x7f0000004080)=""/49, 0x31}, 0x8001}, {{&(0x7f00000040c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000004540)=[{&(0x7f0000004140)=""/159, 0x9f}, {&(0x7f0000004200)=""/251, 0xfb}, {&(0x7f0000004300)=""/91, 0x5b}, {&(0x7f0000004380)=""/105, 0x69}, {&(0x7f0000004400)=""/174, 0xae}, {&(0x7f00000044c0)=""/8, 0x8}, {&(0x7f0000004500)=""/60, 0x3c}], 0x7}, 0x35b3}, {{&(0x7f00000045c0)=@qipcrtr, 0x80, &(0x7f0000004780)=[{&(0x7f0000004640)=""/27, 0x1b}, {&(0x7f0000004680)=""/231, 0xe7}], 0x2, &(0x7f00000047c0)=""/52, 0x34}, 0x9d37}, {{&(0x7f0000004800)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000004940)=[{&(0x7f0000004880)=""/163, 0xa3}], 0x1, &(0x7f0000004980)=""/213, 0xd5}, 0x8}], 0x7, 0x1, &(0x7f0000004c80)={r4, r5+10000000}) 11:57:34 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="cf81842b0000000000"], 0x9) 11:57:34 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getpgid(0xffffffffffffffff) r0 = fork() ptrace(0x10, r0) tkill(r0, 0x1a) r1 = fork() ptrace(0x10, r1) tkill(r1, 0x1a) r2 = fork() ptrace(0x11, r0) tkill(r2, 0x1a) fork() setpgid(0x0, 0x0) 11:57:34 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xe9}, "83cb0621ce23da1a6411a9afcf62b245c3b46b8817252102f3a7a2a1e9ccb35c2d236ae1cd59cd15cd55dbbad69d439396f5991c61dcf61ba966536556def65b2d010aefbd04625f407629a0ff96032de5a4842fcc5cd4d7d62e861fc8c5d153b6e09c481a21eeb7215cdd9a55c69e974cbe9922400c9ec57aad41d5b1853fe509253d579603922b69746d7e42b08dc483bc8f1bebe9c94c0dc761e958d9d7653b26b22b07fe2c6740f3bfbf05f5918b4799da5b7c37d7e421224b199c21437ec91fda3735bdb42f1f7d79aeca1b389ca6a7001d3db37d1fb92502d402a9370e8fb8236e26d9c1ee3f"}, 0xed) 11:57:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000140)={&(0x7f0000000040)=""/193, 0xc1, 0x6, 0x80000000}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9ac8}}, './file0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="814dea2a2288000000", @ANYRES16=r1, @ANYBLOB="00042cbd7000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="080035000100000008000d0095090000140017800500010003000000050002000f0000000500a3000000000008000c00640000000600960006000000040046001800490004ac0f000dac0f0004ac0f0004ac0f0008ac0f00040044000400cc000400440008000d0008000000"], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r4, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040c4}, 0x0) 11:57:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0x70bd26, 0xfffffa8c, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x40}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x4000080) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x943a) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000013c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x60, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x22}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7fc0}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x40}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x20}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c0ed}, 0x4000800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYBLOB="2c7681c173e4eff119db756c63000000", @ANYRES16=r7, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="08002600a80900000800270004000000"], 0x2c}}, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYRES16=r7, @ANYBLOB="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"], 0x102) 11:57:35 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000100)=@hopopts={0x0, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x20}, @pad1]}, 0x18) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="2b0b00000000000007280000000208360080030100000000000006000000050000007f00000000000000000000000000000007280000000208000100080000000000000001000000000000006d020000200000007f00000000000000040102050200690401070000"], 0x68) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = dup(r1) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000140), &(0x7f0000000180)) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000080)={0x2, 0x2, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x5, 0x9, [0x80000001]}}, @enc_lim={0x4, 0x1, 0xff}]}, 0x20) 11:57:35 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="018000000000000000"], 0x9) 11:57:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000140)={&(0x7f0000000040)=""/193, 0xc1, 0x6, 0x80000000}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9ac8}}, './file0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="814dea2a2288000000", @ANYRES16=r1, @ANYBLOB="00042cbd7000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="080035000100000008000d0095090000140017800500010003000000050002000f0000000500a3000000000008000c00640000000600960006000000040046001800490004ac0f000dac0f0004ac0f0004ac0f0008ac0f00040044000400cc000400440008000d0008000000"], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) 11:57:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params]}, 0x24}}, 0x0) 11:57:35 executing program 2: mknod(&(0x7f0000000000)='./file0\x00', 0x10, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESOCT], 0x102) 11:57:35 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r2, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000140)={0x20000000}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x6) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) write$bt_hci(r4, &(0x7f0000000100)={0x1, @sniff_mode={{0x803, 0xa}, {0xc8, 0x9, 0x4, 0x3, 0x7}}}, 0xe) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='dummy0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r6, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r5) 11:57:35 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}}}, 0xa) 11:57:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000140)={&(0x7f0000000040)=""/193, 0xc1, 0x6, 0x80000000}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9ac8}}, './file0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="814dea2a2288000000", @ANYRES16=r1, @ANYBLOB="00042cbd7000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="080035000100000008000d0095090000140017800500010003000000050002000f0000000500a3000000000008000c00640000000600960006000000040046001800490004ac0f000dac0f0004ac0f0004ac0f0008ac0f00040044000400cc000400440008000d0008000000"], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 11:57:45 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000180)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10, 0xffffffffffffffff, 0x8000000) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x6) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)=ANY=[@ANYBLOB="0f0000060000000042", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000140)={0x3, 0xffc0, "702819", 0x1f, 0xfa}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x2, 0x4}, 0x6) 11:57:45 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000080)=@dstopts={0x6, 0x9, '\x00', [@pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0x6, 0x8001, [0x6]}}, @enc_lim={0x4, 0x1, 0xfb}, @calipso={0x7, 0x30, {0x1, 0xa, 0xf7, 0x6, [0xca, 0x5, 0x1, 0x2, 0x9]}}]}, 0x58) 11:57:45 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f"], 0x102) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x5, 0xc8, 0x1}}}, 0x6) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xad}, "eabbd95de057938ec847bec8b08f08b1783624e7b0980c7bc99c5932bb3358a9e71d179f6e98dff61d370084c11a94d3f2961f8aa93f18786da5a1ea845910a4b81ca0dad511d90bebc8c1a07a11682f5790b6269c51041c9abe103365bd7c5af9e68f41d4549de610daef72eaace984f5c7623adc06898c27dd8920c1a0bbed9f9a972894cb01054bdb01d8826f6fd8686e1586ec0e5707ab7b4fcfc423f2ed19e60edf64f462edb7a4a3d9a0"}, 0xb1) 11:57:45 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22, r4}) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@srh={0x0, 0x0, 0x4, 0x0, 0x1}, 0x8) 11:57:45 executing program 2: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="c40202a3c6deedc90900ffea"], 0x102) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x63, 0xa}, {0x8, 0x3, 0x3, 0x3, 0x37}}}}, 0x17) 11:57:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x2c}}, 0x0) 11:57:45 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x201) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="9811b416240000000000000092675a9eed92a8c20c45248749b781ffffffffffffff462af69d1bfa35600a54599575c5", 0x30}], 0x1) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000200)) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) [ 899.465970] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 899.467942] Bluetooth: hci3: ACL packet for unknown connection handle 200 11:57:45 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x102) [ 899.540911] Bluetooth: hci2: Malformed Event: 0x2f [ 899.542699] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 899.544241] Bluetooth: hci2: Malformed Event: 0x2f 11:57:45 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r2, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f0000000040)=""/150}) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000d80888773b91c13cf75c327f7803d854c74fc3aef00bb318a953514b97af86f5286af2b0020058bb3423"], 0x8) 11:57:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x2c}}, 0x0) 11:57:45 executing program 2: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="042fff01"], 0x102) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc6}, "0f7c387610a02efad27c30edadac999cc4064fc7499d4aeeda4c145441da18b0117089f2b8f9466a51483e7851ee1d5c80254de1b1412dc03498c56b29501366d9fc3c06bd8f48fc7e327b659d1739cc829e62dd28deac72eb58ab0193bc1bddfd8bf25384d2d4d3659b616c92794faba379dddbf2886482fa2638342f07f9bd69907b3d1575bf9b2bf8d10597f992cb2c69c7d5498f8278f50636ac0336232813abe33bab099da2c07b29ef4ddad293825cd54390f196356309689b104f25fa1eecbbfb678e"}, 0xca) 11:57:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000140)={&(0x7f0000000040)=""/193, 0xc1, 0x6, 0x80000000}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9ac8}}, './file0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="814dea2a2288000000", @ANYRES16=r1, @ANYBLOB="00042cbd7000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="080035000100000008000d0095090000140017800500010003000000050002000f0000000500a3000000000008000c00640000000600960006000000040046001800490004ac0f000dac0f0004ac0f0004ac0f0008ac0f00040044000400cc000400440008000d0008000000"], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) 11:57:45 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22, r4}) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@srh={0x0, 0x0, 0x4, 0x0, 0x1}, 0x8) 11:57:45 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = accept4(r0, 0x0, &(0x7f00000000c0), 0x81c00) write$bt_hci(r1, &(0x7f0000000100)={0x1, @setup_sync_conn={{0x428, 0x11}, {0xc9, 0x6, 0x7, 0x6, 0x1000, 0xff, 0x100}}}, 0x15) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x6) 11:57:45 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f"], 0x102) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1000}, "30802cd5e6bef5f6b05922dade7c5787234f75b5c1193d53e62328b58afe31e49e4682fbde89995e1816780fa18ef3b528d639f14d817845b69e60d8cff3aafa325c1203b51bfa148997a78e659b8f0adcd617a870ee58df50793f83b2ebbdfb3f8a1ec233c03a1198bf1338b8cd0276c06c5c12d79d695391f4109cf3c8533aedea54e9f842c5479d9878387ad50d9fa8cdab800283a0608505fedae2056f8c6bfecec7eda5211c8372261e6423e23e5469f8e07d4dbdb31c98b422deaa4c0b17d9cb7848bd1e91c656c06d64a81a321bfa092cb66b61fc287f96fe0a106b402fffb78d797f69e60f2b264db1fb63f76af5801c6295cf86fcdf482c97fd1aa702aec7828340f91b911db61c508b364666446db74aac7ba46feb4bdf028fa5e7a983fd21b47e23bbc438d06465bdaac422ab802c44e94c6cee5a0ec9f266ed3093fd165ee8535ecf819200c74f1609dc29027bcd04201970954b0b8c7d56b56b80493aace8e579c7facc229cc619ff71cf8ebcccacef9a98f1f052a101ff8ccb2650750d8a0ec251042a008c65902186f52043fdd0155a64b535776e56b2d59260c3617f7298a32a09c41d774787a65a10c40e73800946fbf2944b31092ce583b966d128380e03e3506d9dd0bc9dba7f71d45525712e4d60651bf4a77e3e978d1dc8e38e227dce9bd92f092325e8998c02cfbba42d1316927ada2c2c988cfd3b79da655984d1ab55730a3750d7124dea6b25a0b59b6a4ed980867fa3d3f42f0fe6e47b0264c9c3e5ef5752c660d808b67b3bee03f514eb031f71b4a615004ed9a554f7d3fde5d008d5b54c829ee47b00f5533632fb10d5f7c944c75eb9df453a5d55d7628bf916c9c9b825e909d5ded8bbf5fefbc525395fea2382ad9af8fe9eb752899a55464db2af6afff42ff4b5b4a16041c28f025378ef6502d07f108a54e20824f818cb29e4fc5dc4dd0ae5bdb269786bd26dcb78f3a34848d0620583e5e42f874133bb1adfbb05cd03ff0ca2a5f01578a9c6a16295d7600a919910d7a86ac5bd4d683776eaf8dd536e7c8cde3f5bc848e511c3de53a0d809eb289574058ad097a84a4e309904a1f9904f7bca51a572bbe3a64284c7ee272c15fb241e64c3379de873b9fb152f40f4e44bee274a09f011326ec5c5ec6586565dd7cc1937b632c868825ffafa2f46be65a279f7b8ce26715a68cc6bcde81ee2e380b98c7dafbdd6ba73f42b6714806018e9ef25ab7eca0d210e079e86b515982878afbd875bb817b27ae8e0fd97bb88e76a45bc2049377ece83a2b23b0cbd33f25b1d2549b2b8bf2a16eed2d50bf02d52e789edb4565dd62918323bbf2f07ea4134c0503dfba42553b7e69273c0c6e50fe961765273a1fb3431cd530ccf0da7ce038bd7c9f5652302b788f366bfd8ed6f21bb97cdc9adc28e63c39b2b206f4ca921521f3f02bd48bb7eb4ede717bd4f5172cff084ca994317b2914a222e4fd202bc34ff84b7779af3f1aa25d4348cf8e9b2b5a38f39195d0f17c119603023e77323e37c4412ec7e33af3c609f1b6ea97b4571581b0771d6f67b99f175d55b7257f29fb57093347ff52b1322ded71f6eb9f6cda3f8a24f727124c1ceabed9424340c19fe0c8ff9cc71ead1ec8dde07dbf801806538c24abb0dc765ec006f4c619ee7b81e6274410b7cb354ab88f15940d2d6d61e1b9ce8eaba3aebe59b1ad24ee6312cc34a0a2dbf61232ffb057855f0f41712980b32faa0eb78f1467c9742738007e7ff2ea5fd3b517b7e7f0276cf02d6c3b84078293728b2050b01e2ccc2a96c80ac0f7ad5eda5db598ca79789e44d568fde0488b76e8fb586f7a79130608db156f6b4d5b451db76d3cc700528fb53d20f5fdaef992f206095533ffd353e1e91f98a5e0d55f766c6468dab123d839264ff0223d70d5bd290f78d8f01772559d211ba77e3eb9e1a2044ac33f516ceebc1d3bdf05ae24e172638b0db1106033569dd143267304038e62b1fd6feece2797022336407fca12b3a37afbd52143464b3c41ab81c6a8bb23d6cc2601b462eb20317de71ed88e59b74491f2193a6d33cc08b6354cdd872a35daf6652f91b7bea38d557d74115174ece68c1b6b11a107d69a3d499f4c349ad1ad459eede381f2addc5c408496624cbbff32dba8cc0aac15df4e901f231e8613ea0d7e00cd3f91490f66e6066d7ab17be0d954cd69f74268116e01b002cddc1469c186a6757156f7712cd492876af850c4426d94013cfc9565de628cf54bd32d7e988baffd622ae404c915727bb1786c989e2b9cc81892db4b61e41269455175144e475a7bfc676cca2013f417c2eb6ccb18ece6145e9d1a8f6d241a7d17d4108d05d850f9efeece71f81a46c808d504fa7457f0622d4559d539e7876f47bd5db77984ed9c0bdafaa241d36bf8d40812ed75e373577b885a4a3cc4f042108dbc7876cfdf9b2148d328e2f5cf61d4be4c71f7d12408e40aff751d363673be28938a0554f94b9f6087fea090c5c3f7f567480c1595d2a9abd1195e3267c8a72a07f139fb6ace6007c983412049edb1ca39c2a8673fadf22df46bdbab86a93970d3aee099bc42c90683e93afeb4efbccc93a38e39501aaca95765f12fcee26b100008bc4294f0f15a68d0f9d5f51077c7038e2ea6a86c17f8f2fec5c0b2d1561f3e056307a42b1cfe0bc92bba7f994230b9d48ec76a5074d77cdc256d6f39357a589992294f75c99bbe007d0c2dbd7f2ded65c105bba4ebd8fe6727e8ff963e65396dc5357bd8ab438559f767585d2c70bcc690699c6fe1990c0649c00215ea861c6da0a544e03627a596193273252382e1377637e03fce77e6b47c0968c3755320fe7f67bfe2208b0d12bb5db6009671dc1e85ea763c81eaacd99a22577e8f1bcc336e0dda08cdc9ed5f007d0af6225e6ea9e35325c8022c107fc88e0dd117f7a52027d808f75c95ab49e95fcce82e26676fca4bbb6d4a9f90b122da3af97a8e79d9326c1ce21d4a85a3b675b6213f271f42e4551eaf9d1739a761190903a69bb1110c3f63e7fd610869d4dc2e3d82c1f0176a20719b7d850f79caebcd4d7556aa7b6b354ceba76c48a9a0c7f4ca21963eab07262a7c626f019c62f9f169809c9c75e171031ddfdfddc77c9a54a11eab0dd799520d946b869ef73e19c09dbe91950b1dead598c75e532c2a4dd7c5015751355a96b9938d40b702ca23bf8af9441ff71fc721c02e9cf9eedec2c161a87a4da5466fd9dd378a50470a32cd0dbde4394593738672177c8cfead061b3b8692094216e155458128041a2400bf1b73eed6e569c2ee5710e554f36587ffd29f54699cf14be0ecf24c1ac8801fd37b00c1b07cc4c3974addd29e4141f8ae22eee1c675eed84eb68dee53e3d61e4e5d5b4718493e5f237ea7669a7ad7baf6cacdd05e59783bdd5605f1ccd4056b8567ae6670e0b126734aa1f16e4a688fcb7a0a090a28a4cb5fe994fed249d96faa5fea31aeeaed9c272bc6cb3ffb72581a7930942acb1c99ed1b16c2cea3982f6bbab04ca070ef3d8d1a82775fbaa1bdb312de687623c2784b4a60442a889989771d4f69e0e36e9a0c733f4b41240ee7e12ea8d6a9e10ccb7c1d991d0411c7ce590fd6e1e812dac2387520ccd457ae629ff98e7aaac9af3fe3681b2382d6bebf2c05b1a30fa9e76bd19b7d26be2d4c9725e2ae65264d1d5a02bcdf07a9d0fcce4b6525c052d904b13e1167ff6ec616461069ecdcd046573af019258abc2863a9772d4ebb253483b8d10c806b4d6450e10470bbb9e10bac641735aac7d66308d59c1eb263008631712339fba13ba633c243a38e15c64b3c6c93bdea42b29114a38945f883d24c84c1ad6d241aa288cf9f90e976f974934ffc4bc4330072a1147b5bc104f1a526fa8071ea7c1f3ca37fc65cfe8cb0641aa160d8faaf81e11a967efb286978e3d1590f63e2b6b8edcb408e53a8a37e04f81989067ee230d7b41e005161cb455c9b520fe95bed76e480bc2c6f77aae4b97174d856a40bbfb412617f004e8b1375b8b484c8aac67e4fbd1496743d5d02d85a40910f5edc242978510c222f36be5c36144f1a2159d8e67893ce3fe3ef7365a948de9e659bc8467908e343de4e262273c9ddbd1795b279592e7ed4fdcf47fd4c15e90e622494856165100c885f829f5ace9acb381b0fcb4beaf8a82b632c0ff1d2126e25861669cbc6073d54654e828b0ec3a7619078840499c2d67827bf09c114d3882b5b880e78a70dfcec209f42b2e2737af32add8b4a5c0b4629a1635b1d52d7d687dc48f3320ef52e0b650da1153114ab7afc1ddc49aa61e905217391989cb8e8f8e18902c73afaee4dda4268f29430b4dd4a223c4a1c387991f5e61069354f1af02ebc1a8cb027d72fc45b5598af01f2d92b5b7a65c02481dea701373820ffcf38eee106e9468ba3c3974df636e44d143e9a2d483860322adb05d0af5901905cb34e5dfabe36fcce06c5c796306b8153cf22701fe4db98dcd248e8efd1a3ad45d83b288928085a748690cef1e4a7f7747b88e2b1d1f89b02aaed75dfbca4c157aa3fb4e0b81a266dcdebc60504b30023c624f4dc8001e6612a314584e9c60eecdcec4ca0e7ae00e015335cf38d89f5e00896a8fc5f69ab7ea896019aff2709a915bb0130842fe81a088ca1f98c9e8611d23917ff26f452a8bc212b48dd81c4d285bdaeaef0fd23a7d18903b0265a3a261d138411c256cbd465375ee5b8fedff4f7ddccc340c567f98e83ab0d1af9b729971f5b5f9a430d2663d02875f709780ca26b0c7610d4cb4cfb478ae2904784e285f1dcbc47779a244731ac360fcffacbf66f71e16638b1a3f620527c0168faec4a2a22deb6daa66478fb8f390b18b2355f7ee6828163dbd767e5ce9194567c480c468ad5adbe8c87d19979293275a74650afb26b12de2aba396949bbf3fbcee2a173162d84865a1a4d41516f4dd34165bf8e6b6de56355b4af4053b94ec78316728f65a5df6672feaf6d30990966885804ad2c0a517f6633de3b356c5999f231b415764d2b8cc8138d248ca3cb9efcab97e8a2d3c52e31a71e0ab3b647a1393662fe31b348b3c3abdf9082d4d4f9d26581a5120cb8c043b7f4f48a11c82c69c31fd559072f5c0b819af1dec86ff2d03f05d0028d6e9f71188b61814db71ba4f2f8b037561072bdc07e6ee9137f49308dd41ef493e74265e80e99aaaeda4084c80618abbbfdaeb24399dc30cba14073eb0af644af8edeb1d628d44127d81d1b9b50aaf94c52a5f5ba7e692d06c29425a536fd4d741c3952401f1f9fb01d8f89e5e08df7facb4508f5c01a0892cd94487230ff6dc464715460e004d781cadf2700982fae50497e40380d9830256cfc1d5b519b188dbe29eb099f7e5f153100eb03e0f76efe02fc720111541ae2112ae19c6178f63e6751ea960f43398156cbc2c2d08cc522e5ab9f6bd8538f9d7c468e0622bf9f29614993e8df2c84105ecad9eb0c2a917166644efc4e069f7948c1c58f7e1115ed371766041e3cfb6b56e604a2681ddf3981b1382d49b6aa5edf8bfe3aa0a76f2843442a9f59822f0f7db97f5d915820b6eab316cb1f5d7f539daa357ca5c2ebec71659840c734e95bb5687a1afa5655def29c0515b6515a48215019be066d110a211df2e0f2094bbd4e5786ab9713a994ebb66da981cb55af70084b8055526f5e338ce8ff2612860a0bb88092ac53de14af1ae5dd5c6f3de2aa8d04768f7eb22fb41545a81ddc39d47bd93419a1ec70b64c4aa1bca30897918ae8473ba3a35271dc2da6ab7"}, 0x1004) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) [ 899.550841] Bluetooth: hci2: SCO packet for unknown connection handle 201 11:57:45 executing program 4: fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=@v2={0x3, 0x2, 0x16, 0xfffffff8, 0x8c, "e3a0f7979b932985f73b26bf6d43f833f5352de895ab0f7d5504424e969ca4eb65c6ed5782400d0493e705140c918f78e335293bc22c11f5dad6b215c263d1a6b9bcda42301b98d0e72e488cfb0a3bef9d0be54e1c3af0db903c5e14efb2519acb5450da789a56e5a799f58d6e8478d38f13dbd80b7cc38c9857cbb0a1103c4ab3c6264695db0c53d00bbf3f"}, 0x95, 0x1) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x8c}, "73a860d3cbfe67f9686ea50594559f99678d3e72f795a3367ce79fd8ce9afb0e3d321fc69a565c7e2e935fef1955a84bb6e7ab6c23b8198b709b3f86abd5f0da15fdd47e15af3ec401757e0949d800ad2bda233734c4168f066c80e911b8894a4be1d5d57b860bdb44f28f576ef534708a2a96d9f3d3d681ad10a21e845a156c7778016548c59a5613347251"}, 0x90) [ 899.679814] Bluetooth: hci3: SCO packet for unknown connection handle 201 11:57:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x2c}}, 0x0) [ 899.705818] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 899.862495] Bluetooth: hci2: Malformed Event: 0x2f [ 899.879211] Bluetooth: hci2: Malformed Event: 0x2f 11:57:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x24}}, 0x0) 11:57:54 executing program 2: syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x102) 11:57:54 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r2, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) ioctl$sock_proto_private(r1, 0x89ed, &(0x7f0000000080)="3952eac3fe1ade60b35fb786e86d861a428113ea3bd72f63660db0da4b1e45c6cf22bb86705006898f05d4d4d8e241a757f2721ddc955b8f095fa51376f3dd67943f1f8d2a30ab4d0fe92b9c8255996f4762b3d56659c713bea304c97edc3aa6a822f88dffc2578a2fd99a3a78ee9aa8dcd089b3439d072715ebeae74523684f136b0b90944a69d5bcc6cdfa559513a018b857a6ccfa50df40233d83235135f2164886568eeb31da8187116339") setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="0000040000000000bb73739b9872860042b1debf64a383cc3ddb2e5cdbf7484ed9129c3afb61c316cc7048869ebb7d87e57d48e666e8f6ad48e3b0040069560f33"], 0x8) 11:57:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7472}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r2, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) pwritev2(r1, &(0x7f0000000440)=[{&(0x7f0000000240)="f5aa2e3e038419da144a8011b40e8b636ac1aab6c5b303481adad23419c9805e0eca9bcb113bbdabf01edcba2022b08bfb12fd3c1791ff30ac7e4be6d805ae9d00f997d10b9dd89f9c35e14dfbbc9543ad39a17080c4d725ece6bd1611ad74e8a1d0fa1766dc3de5add550f25d0f5d3069c3628fc44a2d31c0f650efdeb33fc01d786c66cf43f4d33c6462372c9226a4dd6bea38827d1ba652177a133b9e5ac391438a7383a419e59377ea23c04011332337f5aec6a2d72c381132b79da5e4526ce325c03fa954356a06d2e80419a374794f3e2477b7ab2fdb8625f5574cc99754f7c412c0a9", 0xe6}, {&(0x7f0000000140)="031edd8baa54a8934a94e42054bcd1ff5f79a980f5f6bb9104d23daaee49c1cf16c451811d803c89505138b5bf60abf7c9095d10894c29532818a2dc67910f6599a3ee67eaa3235d4f24e684f3ed2f7e8e3ed4b1bd427a25f0affbb41786ed3940f925c02f06d54ee307b1", 0x6b}, {&(0x7f0000000340)="e8ffbe903d02ef2181e888843b0d9475", 0x10}, {&(0x7f0000000380)="04d03ae0449f13e02fbdb4ccb6c1d18e2e4d936d7d7517a41724880b507c75ef3c2e26cf3d2433e4f8f4a264c57ddcb2ea02e44c4502e176a9225be145549eef942af9ffa8046de1a0b7269beb622ee250d9888a4681e89d7743a2a2b76d373be0cea963a2ce2453927d6518d653bbebf7445354b3c9693895e76cf367aa4282a7d09583935d7b0ad6e37fec994e53c8a45bdba6e1e464c2c2e450ba5ef1fe3544360d846e7d92", 0xa7}], 0x4, 0x20, 0xf9a7, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r5, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac0000a9d52e115820536672cfd41800", @ANYRES16=r7, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="08002600a80900000800270004000000"], 0x2c}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x102) 11:57:54 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x6) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = dup(r1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x2, 0x4}, 0x6) 11:57:54 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22, r4}) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@srh={0x0, 0x0, 0x4, 0x0, 0x1}, 0x8) 11:57:54 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x9) 11:57:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000140)={&(0x7f0000000040)=""/193, 0xc1, 0x6, 0x80000000}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9ac8}}, './file0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="814dea2a2288000000", @ANYRES16=r1, @ANYBLOB="00042cbd7000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="080035000100000008000d0095090000140017800500010003000000050002000f0000000500a3000000000008000c00640000000600960006000000040046001800490004ac0f000dac0f0004ac0f0004ac0f0008ac0f00040044000400cc000400440008000d0008000000"], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) 11:57:54 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22, r4}) 11:57:54 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000000)={0x1, 0x17c1}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x6) 11:57:54 executing program 0: r0 = fork() ptrace(0x10, r0) tkill(r0, 0x1a) tkill(r0, 0x3e) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x101001, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x8, 0xb4, 0x6, 0x9, 0x0, 0x4, 0x840, 0x18, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000040), 0xd}, 0x41200, 0x3, 0xfffffff7, 0xe, 0x9, 0x7, 0xfc01, 0x0, 0x1, 0x0, 0x1f}, r0, 0xb, r1, 0x3) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f"], 0x102) 11:57:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x24}}, 0x0) 11:57:54 executing program 4: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0435060000000000006ce7e2405d82d9c4a6ee4d818d96838978676186f41f12fedc56fb3632301bb9a68b86982dca75632147c0a8a7201f7a9030188c889b7cb19a2ccd5ad91fcb03d7354d1f57c94ce9af2e14e3c258544334cbe0bb7a7b51bcf8c94e02c804e3975bcac6"], 0x9) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 11:57:54 executing program 2: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="042fff0187cf708be8c907a051d129ad815b7fad53fff679d1a2f329554a1c3f455714072f9517a0b6471d723882df79360d4fd7f0ae2aaae7b860eac924dc1a20ce5c67f83166be161e5133de9a332525862b9bfdf6226317d005d11633d51dd5c63c6b720dc45df858d2d139300e526c72f856ab0657cd4d2e5db3980c3248008de10b0215de"], 0x102) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x20, 0xa}, {0xadf2, 0xfd9, 0x1, 0x0, 0xff}}}}, 0x17) 11:57:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000140)={&(0x7f0000000040)=""/193, 0xc1, 0x6, 0x80000000}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9ac8}}, './file0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="814dea2a2288000000", @ANYRES16=r1, @ANYBLOB="00042cbd7000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="080035000100000008000d0095090000140017800500010003000000050002000f0000000500a3000000000008000c00640000000600960006000000040046001800490004ac0f000dac0f0004ac0f0004ac0f0008ac0f00040044000400cc000400440008000d0008000000"], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x14) [ 908.875153] Bluetooth: hci2: Malformed Event: 0x2f 11:57:55 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22, r2}) [ 908.897044] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 908.898270] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 908.913251] Bluetooth: hci2: Malformed Event: 0x2f 11:58:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000140)={&(0x7f0000000040)=""/193, 0xc1, 0x6, 0x80000000}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9ac8}}, './file0\x00'}) 11:58:04 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x6) r1 = syz_io_uring_complete(0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f00000000c0)=0x80, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0x3}, 0x6) 11:58:04 executing program 0: shmctl$IPC_RMID(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = shmget(0x2, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000480)=""/154) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="08002600a80900000800270004000000"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)={0x38, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x61}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) shmget(0x1, 0x4000, 0x40, &(0x7f0000ffb000/0x4000)=nil) r4 = dup(r0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r5, @ANYBLOB="2001f35f723b36f0e7033a00000008000700", @ANYRES32=0x0, @ANYBLOB="0c009900080100006100000069005b00fe561bcdd3c954cd3a38d78a73bcee91e2aced38dfa05246a2a3664dd57418af6a5cd68338488e4ece12d0e7d9bb73716cc732d36a9fa7165a2e12b39a9e218802126629f31d599862270535e4a42677d95efba1903f0f4578506e714dfa8232bbd06ea1020000000600650000800000"], 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x1c, r6, 0x400, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES32=r7], 0x102) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r5, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x1e}}}}, ["", "", "", ""]}, 0x28}}, 0x20004000) 11:58:04 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22}) 11:58:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000500)=ANY=[@ANYBLOB="798f6dccf30579ff"], 0x8) 11:58:04 executing program 2: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="042fff01"], 0x102) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 11:58:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x24}}, 0x0) 11:58:04 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c9101e001a00050019041600090000000700309c17558e1aa1e0e16b50edb00700f7ff01800200010006000800020056a58eef661faaa017aa0809"], 0x23) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}}}, 0x4) 11:58:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x8000) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r2, 0x1, 0x200000, 0x0, {0x25}}, 0x14}}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00'], 0x8) r6 = dup2(r5, r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x10, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000500)=@srh={0x3a, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, 0xfffffe6f) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f0000000680)={0x10c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x0, 0x8, 0x0, 0x1, [{0x0, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x2d7047ff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x574c5702}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x613349d3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x20}]}, {0x0, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x72086b5e}]}, {0x0, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x206d59fd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0xf655d90}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x0, 0x5, 0x5c421f61}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfdb}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d2022f4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd83d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6619}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdf99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6184dd25}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb068}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x353}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9d8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51fb6f54}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf15}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xf7}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6002}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x420a141c}, @NLBL_CIPSOV4_A_MLSCATREM={0x0, 0xa, 0x56b7}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x44, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec85}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe851}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5a2e}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x209c3732}, @NLBL_CIPSOV4_A_MLSCATLOC={0xfffffffffffffef0, 0x9, 0x1ad69fe3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78c5022a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41566841}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x48080}, 0x4) 11:58:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000140)={&(0x7f0000000040)=""/193, 0xc1, 0x6, 0x80000000}) 11:58:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="08002600a809000008002700040000009f0c9fbaf1bd3b05f32d00154504fbcc051f4dc009bc99ad854ba6c07eda54f09f4379ca4a32192cdb37d5902367e0e5bd60"], 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r7, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r10, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRES16=r4, @ANYRES64=r4, @ANYRESDEC=r4, @ANYRESDEC, @ANYRES64=r9, @ANYRESDEC, @ANYBLOB="4b7e5285d52b9396782a29d50bbd84b8cd8e0e0f67642c2614b879884b2394662534feaf4526851976fc4d65ab82e466ffd924d3f175a2dbb42da59dd34589f3f55e8bea01eecc864db3d895b7be88953ec48e526d35fe1c0624f84c1e097a1d87c1928d46644172304c869495fca0453d23649951d584dd29192b1c71acd9da0a86268fe130d9b6ef5af4b40b50483dc70e0f284a83a1a2fd785aa9eca851e8c17c5218c3c8ca", @ANYRESHEX=r12, @ANYRESDEC], 0x147) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="00000000001f00"], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x73, 0xc8}}}, 0x5) [ 918.035869] Bluetooth: hci2: Received unexpected HCI Event 0x00 11:58:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x24}}, 0x0) [ 918.080065] Bluetooth: hci2: Received unexpected HCI Event 0x00 11:58:15 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="9ecadc72279e0d21c29695fac72a524b6c761f0a53f474ec0f57e16879143a4ad4aa07c995a5b5ac806863d49cebf400ed82e9088567431514a26bd02bb0a7db527223fd2a944a82d006fc2a79b640c8"], 0x102) 11:58:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x24}}, 0x0) 11:58:15 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22}) 11:58:15 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x2b}, {0x3, [{@any, 0x43, 0x49, "afef30", 0x4, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x7, "8e1b0d", 0x80, 0x9}, {@any, 0x5, 0x7, "db371c", 0x7, 0x2f}]}}}, 0x2e) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x2f, 0x2}, {0x7}}}}, 0xf) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 11:58:15 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=ANY=[@ANYBLOB="1200040000000000"], 0x8) 11:58:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x3, 0xa, 0xfffffff7, &(0x7f0000000040)={0xffffffffffffffff}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x6) 11:58:15 executing program 0: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000480)={0x159, 0x1e, &(0x7f0000000080)}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x80, 0x0) syz_open_pts(0xffffffffffffffff, 0x4) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000680)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f"], 0x102) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xc7, 0x4}, {0x1ff, 0x5}}}}, 0x11) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000004c0)={0x3a, 0xffffffff, 0xe5a, "db7c1a164488bf7aeae19aa86b83eec34c6e62b0048d133759e43298cc92333192f582c9f437ffcde9989908002c76482643946df91c52d8bbf8"}) 11:58:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:58:15 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22}) [ 929.422368] Bluetooth: hci2: Malformed Event: 0x2f [ 929.425880] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 929.462439] Bluetooth: hci2: Malformed Event: 0x2f [ 929.464327] Bluetooth: hci2: ACL packet for unknown connection handle 200 11:58:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x24}}, 0x0) 11:58:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:58:15 executing program 4: setrlimit(0x3, &(0x7f0000000040)={0x4, 0x69}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x0, 0x3b}, @l2cap_cid_signaling={{0x37}, [@l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x4, 0x400, 0x7, 0x6}}, @l2cap_conf_rsp={{0x5, 0x8, 0x27}, {0x3, 0x0, 0x2, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_flushto={0x2, 0x2, 0x6}, @l2cap_conf_ews={0x7, 0x2, 0x2}, @l2cap_conf_mtu={0x1, 0x2, 0x3}, @l2cap_conf_efs={0x6, 0x10, {0xfa, 0x2, 0x1f, 0xffffffe0, 0x1, 0x73}}]}}]}}, 0x40) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xcf}, "712bfee28950987ab60266b6f65f6b68c0b8475629a57e3a0b37124ac7e092699628aed8db45c0474f0cb2935611210aecc0756ab1031653a768c6754d5be9903b4689b1424c8af03bb860c7de1567e8db3fcb3f618314cf6bd7a8db694e07dca08384a197205ea75a0ebc176a4257c7db52e790f67720fec93cc8b21ceb02e4f9dbed49f3e883dbebaae512e264c4c72e256c7e935b086e1ed8a461d27e7ed91362e1a1fc26946a13f79d42ffecace1e5724e0c6adddacd0d110cd65d2319c459e546b1947cec581433cfcd2babac"}, 0xd3) 11:58:15 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) setsockopt$inet6_opts(r0, 0x29, 0xd, &(0x7f0000000000)=@hopopts={0xff, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}]}, 0x10) 11:58:15 executing program 0: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c, 0x40800) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000000c0)={'mangle\x00'}, &(0x7f0000000100)=0x24) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = dup(r1) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x5, 0x4, 0x4, 0x100, 0x0, 0x62}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f"], 0x102) 11:58:15 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042fffbaf5cd8b4153551670f7f4fd04f86b6bd7d28d1fb3e45fee4b2e1dcb8dfee98cfd16b6078a40d8c7cb8788b3112a2c0a62806950"], 0x102) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xaa}, "e58b4d22aaef738a82787da4fe3cf2ed643ce318869aa7037154a26282e43e8345c41e21bc85422dd72bb9cc4752db3b0906346527a064d488a9e301108d28464cf996ad0b1d28972423ee66f4e20bee3b55a616410604ce3de5d2eafbc194fa7b3c533f23df2947671b3c46d5a172c6882440e26fa24f714c5a99be86019c6ad3a2ef1a1362a3d6feb0062977171ddec657af5193863bbb16643a824aafae53ede8c3ac769d16d35738"}, 0xae) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xf1, 0x4}, {0x1000, 0x7f}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x1, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_reconf_req={{0x19, 0x81, 0x8}, {0xc8d, 0x8, [0xd600, 0xfffe]}}}}, 0x15) 11:58:15 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = dup(r1) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080)="2b92052e32168a51092fa5c390c3c23273f9761d726d3e4e6b6faa9729bd69e103a2ee24ff8afd2f0df4d9426304a3acd0e3923d9483dd2260f0b59b4835a8014235756ab57aa7402ea2868bc6094dfdfbaf7f571b595571e9c960bd1d1569a7f65f700b46336050704ea02efad4c26bcd8c87bb2069f020d524ecc7e8a1924231378ed616b842abfb53ba907efb590f4bf9ea9cdb88df7b8fef06e96b5a713ac4a733cc4ab8e8a71bad1c1fb1a0b152abed97ca23316309230797e95db89a0b25ff00d3dcaf") write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 11:58:15 executing program 4: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_rsp={{0x7, 0x6, 0x4}, {0x9, 0x1}}]}}, 0x11) [ 929.729477] Bluetooth: hci2: Malformed Event: 0x2f [ 929.736878] Bluetooth: hci3: Malformed Event: 0x2f [ 929.740588] Bluetooth: hci2: Malformed Event: 0x2f [ 929.751860] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 929.752681] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 929.760598] Bluetooth: hci3: unexpected event for opcode 0x2043 [ 929.772771] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 929.774532] Bluetooth: hci3: Malformed Event: 0x2f [ 929.775424] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 929.776535] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 929.776915] Bluetooth: hci3: unexpected event for opcode 0x2043 [ 929.779353] Bluetooth: hci3: ACL packet for unknown connection handle 201 11:58:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000140)={&(0x7f0000000040)=""/193, 0xc1, 0x6, 0x80000000}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9ac8}}, './file0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="814dea2a2288000000", @ANYRES16=r1, @ANYBLOB="00042cbd7000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="080035000100000008000d0095090000140017800500010003000000050002000f0000000500a3000000000008000c00640000000600960006000000040046001800490004ac0f000dac0f0004ac0f0004ac0f0008ac0f00040044000400cc000400440008000d0008000000"], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) 11:58:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:58:15 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22, r1}) 11:58:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000140)={&(0x7f0000000040)=""/193, 0xc1, 0x6, 0x80000000}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9ac8}}, './file0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="814dea2a2288000000", @ANYRES16=r1, @ANYBLOB="00042cbd7000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="080035000100000008000d0095090000140017800500010003000000050002000f0000000500a3000000000008000c00640000000600960006000000040046001800490004ac0f000dac0f0004ac0f0004ac0f0008ac0f00040044000400cc000400440008000d0008000000"], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) 11:58:16 executing program 0: ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x9, 0x7, 0x1, 0x80000001}) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x102) 11:58:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000140)={&(0x7f0000000040)=""/193, 0xc1, 0x6, 0x80000000}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9ac8}}, './file0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="814dea2a2288000000", @ANYRES16=r1, @ANYBLOB="00042cbd7000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="080035000100000008000d0095090000140017800500010003000000050002000f0000000500a3000000000008000c00640000000600960006000000040046001800490004ac0f000dac0f0004ac0f0004ac0f0008ac0f00040044000400cc000400440008000d0008000000"], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) 11:58:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000140)={&(0x7f0000000040)=""/193, 0xc1, 0x6, 0x80000000}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9ac8}}, './file0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="814dea2a2288000000", @ANYRES16=r1, @ANYBLOB="00042cbd7000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="080035000100000008000d0095090000140017800500010003000000050002000f0000000500a3000000000008000c00640000000600960006000000040046001800490004ac0f000dac0f0004ac0f0004ac0f0008ac0f00040044000400cc000400440008000d0008000000"], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) 11:58:25 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440)={0x2f}, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) 11:58:25 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22, r1}) 11:58:25 executing program 4: ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) 11:58:25 executing program 2: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="042fff01"], 0x102) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x11a}, @l2cap_cid_signaling={{0x116}, [@l2cap_conn_rsp={{0x3, 0xed, 0x8}, {0x20, 0x5, 0x6, 0xee}}, @l2cap_info_rsp={{0xb, 0x1f, 0xf2}, {0x6, 0xffff, "2b110b311bb2e68ddb17c3e4aa98f03fa4fd212c2631469704bae131124f7482ddc916005f39f395ab1c6d8267cbbe55bcd9aec18021f8dde059d6ac4fe7d5da7c28fe3984eccaf97e8aa737c3ccb05f93cafa2c201373c431a28f9687ecd6426e42beee7cb3accc724fcb8d12a201c1804c6ea50384708def09fbe63a007a39ed583096aca5d30b44c3b40c79d47cade46b1d22dcc300cf766d02e537c1ab09b274e4aaa7186ce5564fbfb353ee845e57e5ca7cfa73fe1d5e511713625da2bb1cab076d5da1f4a58870041509effc3ca75d51397ac8a0d1e687a5c2a0818453c205222625e88df1000a26e479de"}}, @l2cap_disconn_req={{0x6, 0x0, 0x4}, {0x2ae, 0x29d}}, @l2cap_create_chan_rsp={{0xd, 0x5e, 0x8}, {0x8, 0x32c, 0x3, 0x638}}]}}, 0x11f) 11:58:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r3, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r1, 0x4, 0x70bd2d, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x66}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x800) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRESHEX=r1, @ANYBLOB="39aadf18bdf6041ede498a11d44613eede250415a128927b7d35b34399deba5f8eb268042a14d7f7bf2178f0bec06208a9aff7555f3918e768691e2203c63b48f9680b39ae3ed58a8a9b46c4f9e72a06f3eefe6c0cebf08fdd6ac5e9a34b621118b076f44886597289ae158a196f7a87", @ANYRES64=r0], 0x102) 11:58:25 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = dup(r1) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) ioctl$sock_bt_hci(r2, 0x400448df, &(0x7f00000000c0)="d42ea72bcc0e7f15a3981c650de5b4c482073c22fc920a69105191e53bd0fba58e223acf4999c9b022b00f519a7749c45f91ab301bb06a54b8683257356f89a7ab73c277d85de216d7ccf51f0c11d00fe1263d68b796b08d7adb16109e455d25862d77a78eb0bc7090b0237735b248d307ed059ed8a2fca24d6151d559fa809d98f1b0d25130d216611982f23d623f4b8d71f93718bc47334b7d0b040eff222c9512097f98bb24788a5a37414054d4825bd83f56b2ee2516a96107ab913a7ad5e141e90f697fe32b73bf06c4a56414022def3a27d5fbab8c86f85c59f9b0092ab3425f2ccf66f231e9f1f7ed9865adce36f34f4975de50e17d2d8f0217a79f4bb979be6dc6280f9adfb9bea4dabc7bf8c8421754e5c185f9cedad14c625caf2dfee5afbbf104b424565033a991a714e700a213ec3ba8d3397d226d4accdf7ae29c427f1002f2eefd2c51d41ab41ed8cc52df2055a467faf6e7f434b101e1953eccce7e7838cae6b96ff41f0764c3a856436c39d66baf505349bfb96c42f91f59754e748cce5631c61c9d5aa8fd25ff4eae09cf46ff1de61416b057c98ccd018bdab2320cdefefe90bb50b17599d83765faa7b1b9bd5b5bdcc2e7858523bcb3bfdfad36876bc77886004e2f0c177a9ebd1099732fc3521a0abfe94ef0223ae3475c11216ee95d21f07cb95361df177e2b23f667901e00a2ba08085b2d6c1b7392c74a90595b9d5b5c25451e14648482ad3e6c8338603f1b3352f852e2919f87e071b254f438c6dc97b4f025b7f53fff1855f32ceced4005bc0f627ff83b8135cce7f9dcb2020c91151e9d6fdf859018760ed015d63a754a55c00d5973fd6430adfbf90aed64247d9e8e03594297b5a6174508f17a0a4334f60a00da5bd8606836797d3b826f35607203591154e48bbe7fea217f903c38abea2e4ef4901787ccaac17080a8a4e134bde10cd064da5ddce2b2171be9a28f8b786bd1614fbaf7fdbe92714e406979cceb8de65fba376c8fbbade54b0e2a676ac5e752248906971737aec16bc45f95697b2442dc8b52628671b855493a2b31916c6d87be61600243133d2c76ff4b42782d14404a9b81419ecf6a07a0434781b305be2df0b04ede5a63ef277cedb8446b8ef258bdf846a6a1b4d0abd92aefe353629011491f67fe69b25ab520fc53e072eead074f185ee8506bbf3742519153ed0f43ad9f868624dcd2f0cd3ddbfe490f290e7fb13430795cf8f0134defafea1d4c78604fbc9e46e3a4fdf4c3e37fbf678a473ea96b02ec4768d88d69762b426ede9570a4de345e6d5bc26a3181822b36d83c0268a8afef541e89e2c624109ed71bb216bdd1456f9ba8b1308f54b48848fa6d8bd9c612624e412acc47b9f0b9cd16ab4753a1b457c5050922721a655c2d866242fb22af05e6c5407e086be145aa7f2c7b0b685854ee6023eb62273829c14cbd1efc583a98673dbaefe5335ba71f3b1599c56e5834017e7ca18e0b0bc007b453ed3a072aed9b6bfc62563f40d24f2b784149e0322aedfec5f21ac38711d4cf1ce3722937e52a8ca9c2453efcf59a7af70834bc33d17b17b550909eeeedaf135461c2040b08d11a3e73059e1b197c6222616143d3b759ceaa440786b68c82d23c9e1745fc9d5f39982ae1b123847b77edc736e5ed38b82f62b43f6c83bd588c7b0450296f4cd57c2bd7406bf7cd80f6e69575660ddf9d501894d02b498d3d661e0b585487ec87e1b0a2ab9a97e87f52fa47e7b1267b98c8be664eb7ef502cd170bd9b372d73d6b02689b3af5310465bd557d212a97bb0a736c026ac4d16038b8bfce0e5c63537a0783fd404b6c4a12d1d1e6eb74f3856faaf082f4ead2792ad227554fcdae8efae63c8b0b8737586ef077777409f4224492c6826b6d5aa4e736d54cc9c42b89ba6540f2c45f4187e4257da45d32b7af967b81fc291817523aeba42a4b6fdd2a1e61f5693d81fa2f26e40441210e2656cc042bb61bee387a86fbbdf59a8e9746c2a79846ef76a09ef12e386be7f446550baeeb82634919573287f3ddf94ce3ea37867a506d1bf71cc9b3a1b8bd64d4b1fc54969b33fb407f78f7597c9a6df69d88d6365847f1566dab5c66ec8f79a6a9084d674852a59ff73c791a4b2ea9d6ee4715528dd7afa5d2fc142149bcf969bce981b580b35da89e9825d3e008202fd9a3a8afce5364b2531b5a248cd265561dee8d00893888dfebe0eb9f6e480199e7981c6f7c21f087b3e3ef475160853a0edf9d1d5e21515a0fce93102992646850764c835d408fc80297aef78bd25f03019bf91b636646eb6643b6154327f6b93b8b4569e531d39a1b139487fb0fcebfe501e87ad629e982756465c7b4c3cfe7dd1692399faa29032b220b004c08bd2d773321c9448f6083ed90bf556b0f5646ef2f97c34f6232a2b0f6b31b3fa1366495659c8f743f4be6f8420fdfc1f97df1f655d394f08ce59316919f0d7db9c5d393783d16beb3a0c97391754ddb3c494f9a329afb726a8afd476618fc78a9f22569e46269594603852eaaac6923d0a1c6b17fa705bc302035b80cf17d3a50d629f4db2ce5a272ec4888b50c1fa9c5512dc428f8a7ca22b710d51b956a1a70bfbb26637e815aeb170344caefb90ac447b2a511383848535265bfbd140041543a2f72d3d25eee1211e000cb576cf5e835b27d092ff65baed2810e4825acf0b82b7c28e68bd86ec0045cc4ed3ae9c7c8be4dbadb3e63766d5131e165ebdd3bbec7f22c7fdd1494fd04cdea51f757da102446e7dc74148d93c0e878031e53b2adb705ed5ab193ec678994ddac9add56af7e5082f75b05bcf6396b1ddc5650f0d01fd4be0a8199a0deb5501a025f9497fc411c963b10840635544fbaa1c9e125df82ae5b492e1d5ebb73d23fdf59e6f5c58dec6ce05eb2c6653d204ed25c652698b563b306163239b7809faeaf667e17985763a2db11852da3d959f3e52bf8af137bfa361190410a7fb2ae4d5e25e088b4579df23bc60c590a80f9ff68ec2976043df4ac26c6b8eba60bf0fde5910408618403c31b83a0b252c4650b6aefe44f5b3e53a10a19a92ee48ebe71f9e793e5025203044555f7fa5f57c830a4349c4a5d02bd1d47e89c94d7b750f07486057f9027286878f32a6524c507658949733a391335e2e0e7d77ad48f373c2e18617ba956f28122c496c5cff194a8623495dd255f63626b72212fa688bedf73940b14c0b7fceb50341133d9d1e0722512ab9d4519b84fc804650366c941e06a0734e08c1661dde30c6d8f916e34d8f2ea99882c3a2341f97fc2f2125c35625eb22e5e948abbc9969b06cf2f4aa7314dacd427dd7beaebefe1c048de6d4cfb69230734f863163cc10d02ab957d0a14564aae8a8ae9c18264a51f426c8fbf949bd21ffa27daef64433c82f90bdbc3fdff62db54de8b88def00126139eab5d2a077a89b99079028c99b1d3cbd5f563da0753f214a4bd787682c6a0e31152ac83106d3f60821fa7de557020ffe73d771e1474c769a9bf99fc4ac7e14c7714c5c2bcf64f5b7ffb903f02d743864d558d7f61cb092997258fd91cfb2366da2cb671d35c0c6e8b730a4e90dee89e70d87a14bb50cfc9ecb2e46cb874d91e48a7cc32698cecbbb19c0194c3dc81f8c45f31450ecdb9d2a78203cc8f76f8d509263be173c03139068cbd1a9cff2cc93b8d6a01c8afa30e7e6948c64b204bd5848f54a980d244c068fa12260c63e805ad2e27eec54a58d6b7a6be5f6ade6bce2f77acd97e4d3074186746b1d1277b848f8cce81f100f8a8bf8b9de57a85663a899b8a63546d7a73ac323e53f0852ed9ecf89f3255f029ad259aaf241cdabc438e8442b1fff7ecb66c32bfb44c8f1fbb640b52157f39e3439e86bbde951e5bc6fbe83b5cbf187d28edbd82b58feb7a4410dc1030b291359a99c39c9a58abf638050bd77756f5b00b7baa39c52f04f582be926d5aa67f965961489052373d63b055d1d8eeaac0c06ff1052b5d6fe2d9fdd3500d458becb715cee77ee28c9b5756780b9b5f6d603953399a132681164cc8c6addeae1609ad569879ff289cbe2ec351ea5cdda5d3c473b66b4498fa5c6425b764f189bc3c6f89ea2149da2a61675eceef0e81f5fa3ad4fd1974916bd86e0d2c54409fb407d56cae3ba94021a4198dd0b4ff1d441f6f9d336b4524808144957520ccc810388557ef972e1e45b0ce0d4739e3f8655d2522004bd770311f8641b08898a8fcae7267903db524695bd18c3b13affde79f340b1e7deaff1b281767a2bfd62acf8a7d5bb4668c82b6b60f18ef6e0617ab3c4ad613ac40364c2c67dc3d68d5eedb590a54c8f420bc8bdfe806e56b257dc7e5d028791916e5d2582d5afdccffed63622a7a2f8b016615513f4102a922ca3bdb4827016f2671b9d011a4bbf57afd2a7699d078b9732021b47d16f57d1fb1fa126838c992b88ff7755cafabcc0f082e759da126aad80d0dd36abccd73a76b06a8e82125ebb60db6bc6a3badf0340d4fafdcd266f0d5f41864ad77336845b46ff540dbf96b56364f4e7d551b4ac6b7cce71dddf68c218054dc66c914d9da5daa5508fe4201cd3a723dc66b2b6f28a942be33dcc8beab324e9ceda5b96d5206e62d128aded6ef964bd4e0511909a5a0fee037f386ac636574715291032d233a983a0e299de2ca7d17e58fec117ea05c17d4e97060c2c06d11087fe660701ad5d6b80f769788b86d4bab8b5c123770a4b7ab396eaf24f7bc043e2f19332929bf05e09b0827b23081419f95402d12d9d55b7165d1faadf97f1db00826a0837cd1f2ea82158ab28e923517373bb952d7c621907bd97159e4ffcd5b35a27174baa9d8fed58eb651f847ffd7c14e0ccac93357cdceb71894ce42990e12d237495f917d88f3166c7a27571a553d641502165bce0d4bd945e883e2f46e11cf3f68286c9b816ad4494b252becc8f21e3e0663868a19eee31f9bebf7abd98c854a39f11ea37d9320f63d50070abcaa0a0a0a0d061ebb99c0c67827013a6562b1160816e9b05e7d6b6edbd0f3e6c916d7b1cff533631d81fdb0bbf1003dd5e2d726056705a94cf6e9bc4832f17c974a306ef9291774592f9fb45cad11c92d37b67fc2256833fba647ec9a2402d41b95d1d91953e949733c4f7eb444e73740a874ae233a8511a647897e4ad435ab858c358f8662582b0d4f5b09ab6f0a722d2e2c96ded09fbbf1c8e4e2984fb747fab6237f71622e0bf3690519b7b81d992f28d3f73f85050e9fe4c0164f167812baa2ced7b2468a1807697bcfdfaa591b877c22d134b4006e3636157c0e787b68410dcd8b4e7056d23932917f215832ff5775bf91d5716a2f724b04ced59992b406053a858e4740be805ffa21cc31787ba823dd624fbe6cfb5f97832c1cbe665fb7ba7e0bdccfe3d0ce3c73f7906c35c04d922bb19c2daf987c0bd3ff8df6633e04411e464eaeb9c3ed19cfa8577a819e6a4d039dc1001f3496d3fe7693e2f8f6a98e40b0256324486bff3cf4500fa87436ac990efc43fc23479cca2239315cccc73cc9e35e7f4269fb16b84c4ea7e53e2b7bfcb5aa5c49103a83d6d3c218bab5fd7940640773983ae5607819da4443f57713e95c9920680e970b90c75a4909ad3e6f45f6d104e0767461df7e0fce24281ad14352548439749a1ce42e4e71ef6052c32585b8fad5a0ea0fb77f60fe45d69df38f4235f84945b7b7e8e37769480ac095828a5b18c927ee2963a99d183290c6d83c73e51fb4d9b196bc7459234bdda91c38df78ab7c7a4738ed6bbfffb2d47") r3 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r4 = dup(r3) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f00000010c0)="6051d24a81a3f2d68f7ba87df78f77ba3993d7cf83860648ed4200a29588f633648dd0a47c8c724f086c55bafab9d4f3498451ec2c2846016fa2865f991be03f55ca6119d541cf99243932b8e3469007e402477db19707eb036c3856a61dbc6b1cd3a5eec53cd583192eed61a6d76bad2dcfd71dfd49a352f98a04de004e1f1a2e1fb9911931ff4301ec71c15b0134889440") write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x6) 11:58:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 939.002348] Bluetooth: hci3: ACL packet for unknown connection handle 200 11:58:25 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22, r1}) 11:58:25 executing program 4: syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x73}, "d33575a38a5c4bc0a4e9b3d506bc5ac252b1063e2e9abad995ae668b109b28e146fb22bed92a0a176fde66020212bcd9f93bb543cd0385bebc17a70a38ff5d849f4a19bbaf9289135b6b38771e8e1ab94c84b47fcd44f042b52d16b3c75421b38d663f90af9b4dfbad1206aa300358b9b49ceb"}, 0x77) 11:58:25 executing program 2: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x2, 0x3c6a35c7, 0x0, 0xb07, 0x2}, 0x14) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0), &(0x7f0000000100)) 11:58:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000140)={&(0x7f0000000040)=""/193, 0xc1, 0x6, 0x80000000}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9ac8}}, './file0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="814dea2a2288000000", @ANYRES16=r1, @ANYBLOB="00042cbd7000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="080035000100000008000d0095090000140017800500010003000000050002000f0000000500a3000000000008000c00640000000600960006000000040046001800490004ac0f000dac0f0004ac0f0004ac0f0008ac0f00040044000400cc000400440008000d0008000000"], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x14) 11:58:25 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet6(r0, &(0x7f0000000040)=""/4, 0x4, 0x2060, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x84}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x29, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x40}, @enc_lim={0x4, 0x1, 0x43}]}, 0x10) 11:58:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:58:35 executing program 0: syslog(0x0, &(0x7f0000000040)=""/252, 0xfc) syslog(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYRES32], 0x102) 11:58:35 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x4, 0x3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r3, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0', [{}, {0x20, '\x00'}, {0x20, '}^)\\[@]%'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '\x00'}, {0x20, '\x00'}], 0xa, "10d37f16b186ec78c4f793bf974578d87d8d668f9e220ff48f1a69de54d021c1c7ab4b6eb1c0324931d08eed80707c6c386624613e4a5ca1fd763b4394f785c7f65417920e7c44c52229e19600fcda24b949ebac9c824d75e51d67396ba842f0c590579a391a7bef45bb34a641ff8d28b5106f47efe32d5a07b07f3f56caa10a2fd77139a27bd9141a04eed29f190e1519ec3c30b87f37e56e5187cfcbbd3a502e810fb3131e280d899339f31b0961b0b845472c37fadd46fc265f9602b21b36296c3cae042f261ac46055dcf6a8d5705646ff6ae2a43d157e30e9c9f8b4ac56cd1752a014"}, 0x104) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1b, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/199, 0xc7}, {&(0x7f00000003c0)=""/101, 0x65}, {&(0x7f0000000680)=""/18, 0x12}, {&(0x7f0000000480)=""/196, 0xc4}, {&(0x7f0000003b00)=""/102400, 0x19000}], 0x5) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/98, 0x62}, {&(0x7f0000000140)=""/231, 0xe7}], 0x2) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="ff0f000000000000d9284425e2bd18205e0e8d77cd8448bd012b83d1981e06460082381c3f6cb16c04410660f627f2f241c7e99cf4980840038e57dcc14a4329812fbf0104c0b748c7466fd6b65af9067059feace00fecbdc33ffa610c118401a9b79b2615e0a9ba47461b7caab25106c3c05590b2e13c0574129e52e5d680dbea0915e0618bee2b21cfad656cae30f80a4ab4dc5e8942376beb2aebf10cd1522f58469062581e5e8fb20cb11c8a4761"], 0x8) 11:58:35 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f0364b03521c96215596f8592e025a37144460366d3892a05898605114fbfaa1f627dce38b5cd4cef57951279e37bbacf72839170f63b983e06fe1c934fe224661a7f38355176f9e5a169c28022e63d483dd2bbe02820e656da1ecb1e93cf507c75f48e253543f0b178e90ecb4e20f87faac8e0baacf3d41b751093a3eee0d5ea120a28f199bb4f56"], 0x6) 11:58:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:58:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000140)={&(0x7f0000000040)=""/193, 0xc1, 0x6, 0x80000000}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9ac8}}, './file0\x00'}) 11:58:35 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042fffbaf5cd8b4153551670f7f4fd04f86b6bd7d28d1fb3e45fee4b2e1dcb8dfee98cfd16b6078a40d8c7cb8788b3112a2c0a62806950"], 0x102) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xaa}, "e58b4d22aaef738a82787da4fe3cf2ed643ce318869aa7037154a26282e43e8345c41e21bc85422dd72bb9cc4752db3b0906346527a064d488a9e301108d28464cf996ad0b1d28972423ee66f4e20bee3b55a616410604ce3de5d2eafbc194fa7b3c533f23df2947671b3c46d5a172c6882440e26fa24f714c5a99be86019c6ad3a2ef1a1362a3d6feb0062977171ddec657af5193863bbb16643a824aafae53ede8c3ac769d16d35738"}, 0xae) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xf1, 0x4}, {0x1000, 0x7f}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x1, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_reconf_req={{0x19, 0x81, 0x8}, {0xc8d, 0x8, [0xd600, 0xfffe]}}}}, 0x15) 11:58:35 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fchdir(r0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040906ffffffffffff"], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x3, 0xa}, {0x6, 0x5, 0x3ff, 0x5, 0x3}}}}, 0x17) 11:58:35 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22, r2}) [ 949.415258] Bluetooth: hci3: Malformed Event: 0x2f [ 949.416177] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 949.419146] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 949.426003] Bluetooth: hci3: unexpected event for opcode 0x2043 [ 949.429234] Bluetooth: hci3: ACL packet for unknown connection handle 201 11:58:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000140)={&(0x7f0000000040)=""/193, 0xc1, 0x6, 0x80000000}) 11:58:35 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = dup(r1) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x282800, 0x0) write$bt_hci(r3, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYBLOB="3a44cc7cc5080630b2f63cdc200f2210e622b772010487a6476e11fe7b0ea7508df4", @ANYRESOCT, @ANYRES16=r3], 0x6) 11:58:35 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22, r2}) 11:58:35 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f"], 0x102) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc8}}}, 0x6) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xcf}, "139b1b8cb072f33e8b4eeb30bcfec7540815b2e7ce7c392e518a14abd68ef44b011cfacb89ae519b5d1ccfed75bc7906f3e9bd4cb489f12db5181b696cbab2989a7c2de6a7428619c45293439c0eacf80b73e8c5571e02db2c501e1e3375735cf429a5c3194048349427f5759efeeb3da0908d22d2f5fd75e7425c6f4f24dc2565bc9db86e849e421a1fad2fa5b766b238ea1347bccdcb5f60eaacf6cc1207582302bd22e63d875e291c9288e8746cf6f12e7ddeb4fed648a93d5f1ef7732a8849a2509dc04d75a1800afcc701c95b"}, 0xd3) 11:58:35 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04358d000000000000"], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc5}, "cb1195c8a7360052efccf669924de91ffdbc9391ff2a7d6214b4d270c379dfae2a771ea79dd9550ae83c08e6b4aa319389d52593093e71d946e3d5767398b6e89c02a8491726aec3cb531176179d39e2218e126d9f2d15ed86210c3cfcd5f7e96f7dc16429fe8e34b41d248fed688be10d42fd1fb93d871579c3a15c60f4bd256e9bfdeda81b7bb4bd0bc9cf897b1ce60105f81f800365e341ab024d3dc6b7e3a126367bdbb7a897ed362228d7696d896d83036d6bbb24466f012212e2dc017349a98b627b"}, 0xc9) 11:58:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:58:35 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042fffbaf5cd8b4153551670f7f4fd04f86b6bd7d28d1fb3e45fee4b2e1dcb8dfee98cfd16b6078a40d8c7cb8788b3112a2c0a62806950"], 0x102) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xaa}, "e58b4d22aaef738a82787da4fe3cf2ed643ce318869aa7037154a26282e43e8345c41e21bc85422dd72bb9cc4752db3b0906346527a064d488a9e301108d28464cf996ad0b1d28972423ee66f4e20bee3b55a616410604ce3de5d2eafbc194fa7b3c533f23df2947671b3c46d5a172c6882440e26fa24f714c5a99be86019c6ad3a2ef1a1362a3d6feb0062977171ddec657af5193863bbb16643a824aafae53ede8c3ac769d16d35738"}, 0xae) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xf1, 0x4}, {0x1000, 0x7f}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x1, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_reconf_req={{0x19, 0x81, 0x8}, {0xc8d, 0x8, [0xd600, 0xfffe]}}}}, 0x15) [ 949.573913] Bluetooth: hci2: Malformed Event: 0x2f [ 949.575634] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 949.584788] Bluetooth: hci2: Malformed Event: 0x2f 11:58:35 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) [ 949.601347] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 949.673905] Bluetooth: hci3: Malformed Event: 0x2f [ 949.681623] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 949.689982] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 949.692679] Bluetooth: hci3: unexpected event for opcode 0x2043 [ 949.696095] Bluetooth: hci3: ACL packet for unknown connection handle 201 11:58:46 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="8438ec11c269312a6e3441d2bc063153da44e138530000060000000000"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=@routing={0xc, 0x6, 0x1, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @local]}, 0x38) 11:58:46 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r2, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r5, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000105}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r2, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0xf75d, 0x66}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x78}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x10}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000804) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x2c}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r9, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r9, 0x12, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x71}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="118b8a18630c"}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x80) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYBLOB="1f5d73b7afb1ef3a5926b346db6f29a69fbdefa1ae216f9d72f49e44b8b78629949aa119bb981a4d16f03e63cb81936d2b2000bca65e30adc4a66f7ccc0ed2e9432008ed9f85c21dac323670f51fdb9c3fbde5e46bbc922ba4d715d29085633b77293cd174832692dea9e4287f8bde85e4abeb1ff7db7497ee17eb947793e00c06099a26a6964b53d06a4954b99decd563bcf8fed0c77f7104944080a7176e931fb6f8a1ceabedd87275e56f9633d86a4abf3896f5cfc9a0c524ed9277598546492109ed9b2d00511eb0a7fb356a14566135e8f198", @ANYRES32=r2, @ANYRESOCT=r8, @ANYRESHEX=r5], 0x0) 11:58:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:58:46 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042fffbaf5cd8b4153551670f7f4fd04f86b6bd7d28d1fb3e45fee4b2e1dcb8dfee98cfd16b6078a40d8c7cb8788b3112a2c0a62806950"], 0x102) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xaa}, "e58b4d22aaef738a82787da4fe3cf2ed643ce318869aa7037154a26282e43e8345c41e21bc85422dd72bb9cc4752db3b0906346527a064d488a9e301108d28464cf996ad0b1d28972423ee66f4e20bee3b55a616410604ce3de5d2eafbc194fa7b3c533f23df2947671b3c46d5a172c6882440e26fa24f714c5a99be86019c6ad3a2ef1a1362a3d6feb0062977171ddec657af5193863bbb16643a824aafae53ede8c3ac769d16d35738"}, 0xae) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xf1, 0x4}, {0x1000, 0x7f}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x1, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_reconf_req={{0x19, 0x81, 0x8}, {0xc8d, 0x8, [0xd600, 0xfffe]}}}}, 0x15) 11:58:46 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x102) 11:58:46 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:58:46 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22, r2}) 11:58:46 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x3ff]}, 0x8, 0x100c00) waitid$P_PIDFD(0x3, r0, &(0x7f0000000080), 0x1000008, &(0x7f0000000100)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043506000101000000"], 0x9) [ 960.053630] Bluetooth: hci3: Malformed Event: 0x2f [ 960.061079] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 960.064455] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 960.067232] Bluetooth: hci3: unexpected event for opcode 0x2043 [ 960.072233] Bluetooth: hci3: ACL packet for unknown connection handle 201 11:58:46 executing program 0: ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, &(0x7f0000000040)=0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x24}}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000100)={0x1, 0x0, 0x8}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="75e8e2343d948a2892c3679fd003e347d6886f54e721d5ae53a1b117461311b36e8a49daa7428a4f175cc15308507d30f944119fa21f21909aea4f19"], 0x2c}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRESHEX=r4], 0x102) 11:58:46 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042fffbaf5cd8b4153551670f7f4fd04f86b6bd7d28d1fb3e45fee4b2e1dcb8dfee98cfd16b6078a40d8c7cb8788b3112a2c0a62806950"], 0x102) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xaa}, "e58b4d22aaef738a82787da4fe3cf2ed643ce318869aa7037154a26282e43e8345c41e21bc85422dd72bb9cc4752db3b0906346527a064d488a9e301108d28464cf996ad0b1d28972423ee66f4e20bee3b55a616410604ce3de5d2eafbc194fa7b3c533f23df2947671b3c46d5a172c6882440e26fa24f714c5a99be86019c6ad3a2ef1a1362a3d6feb0062977171ddec657af5193863bbb16643a824aafae53ede8c3ac769d16d35738"}, 0xae) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xf1, 0x4}, {0x1000, 0x7f}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x1, 0x2043}}}, 0x7) 11:58:46 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22, r1}) 11:58:46 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)=""/19, &(0x7f0000000040)=0x13) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) [ 960.191746] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 11:58:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30000}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x3c}}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r8, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20040810) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r10, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=r2, @ANYRES16=r5, @ANYRES32=r9], 0x17) 11:58:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:58:46 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 960.297405] Bluetooth: hci3: Malformed Event: 0x2f [ 960.301971] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 960.302118] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 960.305888] Bluetooth: hci3: unexpected event for opcode 0x2043 11:58:46 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000034f481cdf0f0d58bdad85bc10ea5d0046d81c5487339127670df64201a27c00"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=ANY=[@ANYBLOB="00000400000070fe"], 0x8) 11:58:55 executing program 4: syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0435060000000000004a256f8d62b8087296bbb0cb1f3fae394ec26b79dbc061c9ec7f56949d514603e931412fff7dd3d4fda8f1f53cea3a4af2b249de605ea3ff145a93b48c71eb042f44b2602582e157d8ec97392248a8dc1061c5017cfaf40a135ee5437c8707b0048892ec82dc38ac"], 0x9) 11:58:55 executing program 0: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f", @ANYRESDEC], 0x102) 11:58:55 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) r2 = fork() ptrace(0x10, r2) tkill(r2, 0x1a) fcntl$lock(r1, 0x24, &(0x7f0000000040)={0x2, 0x3, 0x635, 0x5, r2}) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000400000000004d5c142392968111600ff5a1e1370a8bffde6fee72deb857d809760e1795a14ead70b976da91944eb62f3075f80488eb5542602ef1e00f2d240746644c2ba629d86ce5145f5cedcd16e8777fbe559679f566aa4455108012409efdbca0d2385edc361d05d534afea53d9c3db4214d36982e92fa4f6fd473400"/142], 0x8) 11:58:55 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22, r1}) 11:58:55 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042fffbaf5cd8b4153551670f7f4fd04f86b6bd7d28d1fb3e45fee4b2e1dcb8dfee98cfd16b6078a40d8c7cb8788b3112a2c0a62806950"], 0x102) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xaa}, "e58b4d22aaef738a82787da4fe3cf2ed643ce318869aa7037154a26282e43e8345c41e21bc85422dd72bb9cc4752db3b0906346527a064d488a9e301108d28464cf996ad0b1d28972423ee66f4e20bee3b55a616410604ce3de5d2eafbc194fa7b3c533f23df2947671b3c46d5a172c6882440e26fa24f714c5a99be86019c6ad3a2ef1a1362a3d6feb0062977171ddec657af5193863bbb16643a824aafae53ede8c3ac769d16d35738"}, 0xae) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xf1, 0x4}, {0x1000, 0x7f}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x1, 0x2043}}}, 0x7) 11:58:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0eaf54dcbb947d2088a5ba01c1d68539d4c5e5873123a78620519038bafe5fa285694f0f5ac884c012bf4db55e87932cd94e96cd0ab967b30c956052eb63d87e6acdf6e7af8cf9c16a53f4f152c169ac16ce7d8d891e38ce01bf883902199dd528447fdfc88455a57e6cc8226ffb606bb8ca3de84845eca5c7bb00"/133], 0x6) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x440400, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) 11:58:55 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:58:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:58:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 969.615312] Bluetooth: hci3: Malformed Event: 0x2f [ 969.616979] Bluetooth: hci2: Malformed Event: 0x2f 11:58:55 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r2, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r5, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000080)=0x80000001, 0x4) [ 969.619759] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 969.625446] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 969.633076] Bluetooth: hci3: unexpected event for opcode 0x2043 11:58:55 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22, r1}) 11:58:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 969.683649] Bluetooth: hci2: Malformed Event: 0x2f 11:58:55 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22, r1}) 11:58:55 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22, r1}) 11:58:55 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x201) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="9811b416240000000000000092675a9eed92a8c20c45248749b781ffffffffffffff462af69d1bfa35600a54599575c5", 0x30}], 0x1) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000200)) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) 11:58:55 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f"], 0x102) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04080403c90002acdd3f6cd4fe0be9f537ccfe6d9a0180181f660a6d66eb3588e4ebab43a720ab5b38d8ca4a82da101a59540773a410648198872afccdddf6a9b2ef9ff4fce8d8046f388f8469d12b1707000000702b09f2faa7f91fe8729cf7080e822b6dcf714d3f53898a6f351754ca56981471b7e4aac88a88"], 0x7) [ 969.809908] Bluetooth: hci2: Malformed Event: 0x2f [ 969.812617] Bluetooth: hci2: Malformed Event: 0x2f 11:59:05 executing program 4: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f", @ANYRESDEC], 0x102) 11:59:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:59:05 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="ff000000000000000000"], 0x8) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x2d6}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = dup(r1) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000380)={0x7, 0x20, '\x00', 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0]}) getsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000040)=""/98, &(0x7f00000000c0)=0x62) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000001c0)=@dstopts={0x0, 0x29, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2c}}, @calipso={0x7, 0x28, {0x1, 0x8, 0x4, 0xffff, [0x37, 0x3, 0x1ff, 0x400]}}, @ra={0x5, 0x2, 0x4db2}, @generic={0x1f, 0x3d, "72aebdfb12cbfc65b3c5bb9906e0f67a4560247678bd537ad1d55faaa4a40c93f042e0feba6b02dcd5d413ba6b4d9332968b97d1cc5589df9c2717e269"}, @enc_lim={0x4, 0x1, 0x1}, @generic={0xc3, 0xb4, "45aee99e7f6e2cfc6ad2a870402567292e41aeff70293c7068e7f10bd78a5216640ad46116ff45e8dc7c191909a900ef8f8d3c6e5957875b4624c301de8cfacd9f68b141d15b47da09f68e64af0eb0b3b96af8ae6f1be742d88e8ac613c7670da063eab611a10ac27bd03514afd8f7def9b609563b8c6644aee41ea22adb29242c40a1ef5eac5f3f2c5f01468116acb1d24495731e28c4d60d41eea9ce5140a4bd279831481626a63b73ab4b818ba53388199992"}, @hao={0xc9, 0x10, @private0}]}, 0x158) 11:59:05 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042fffbaf5cd8b4153551670f7f4fd04f86b6bd7d28d1fb3e45fee4b2e1dcb8dfee98cfd16b6078a40d8c7cb8788b3112a2c0a62806950"], 0x102) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xaa}, "e58b4d22aaef738a82787da4fe3cf2ed643ce318869aa7037154a26282e43e8345c41e21bc85422dd72bb9cc4752db3b0906346527a064d488a9e301108d28464cf996ad0b1d28972423ee66f4e20bee3b55a616410604ce3de5d2eafbc194fa7b3c533f23df2947671b3c46d5a172c6882440e26fa24f714c5a99be86019c6ad3a2ef1a1362a3d6feb0062977171ddec657af5193863bbb16643a824aafae53ede8c3ac769d16d35738"}, 0xae) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xf1, 0x4}, {0x1000, 0x7f}}}}, 0x11) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x1, 0x2043}}}, 0x7) 11:59:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:59:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_del_from_resolv_list={{0x2028, 0x7}, {0x1f}}}, 0xb) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x6) 11:59:05 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22, r1}) 11:59:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x44, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYRESHEX=r5, @ANYRESOCT=r2, @ANYBLOB="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", @ANYRES32, @ANYRES16, @ANYRESHEX=r0], 0x102) 11:59:05 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22}) 11:59:05 executing program 0: init_module(&(0x7f0000000040)=')@]\x00', 0x4, &(0x7f0000000080)='[)$&\x00') syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xfffffffffffffe68) [ 979.186296] Bluetooth: hci3: Malformed Event: 0x2f [ 979.187934] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 979.190145] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 979.191505] Bluetooth: hci3: unexpected event for opcode 0x2043 11:59:05 executing program 0: pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="db1618875be498544c33d85d62103eb3ba08eb8786906a6511ad8f604aeda4eadcd34cd80ab5a3e46249e98b5dcdbe6786d062fba210192a69e76f627bc1fccb691aea6d5118405f186ff4fd927cadd84e151f212137cba8f76685b29607933bf21f6b3da87b6dbcb99e4bfb475d12e3e4c4869a19e6", 0x76}], 0x1, 0x3, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x102) 11:59:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:59:05 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042fffbaf5cd8b4153551670f7f4fd04f86b6bd7d28d1fb3e45fee4b2e1dcb8dfee98cfd16b6078a40d8c7cb8788b3112a2c0a62806950"], 0x102) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xaa}, "e58b4d22aaef738a82787da4fe3cf2ed643ce318869aa7037154a26282e43e8345c41e21bc85422dd72bb9cc4752db3b0906346527a064d488a9e301108d28464cf996ad0b1d28972423ee66f4e20bee3b55a616410604ce3de5d2eafbc194fa7b3c533f23df2947671b3c46d5a172c6882440e26fa24f714c5a99be86019c6ad3a2ef1a1362a3d6feb0062977171ddec657af5193863bbb16643a824aafae53ede8c3ac769d16d35738"}, 0xae) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xf1, 0x4}, {0x1000, 0x7f}}}}, 0x11) 11:59:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:59:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x102) 11:59:05 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r2, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r5, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r8, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$bt_hci(r10, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRESDEC=r3, @ANYRESOCT, @ANYRESOCT=r3, @ANYRES64=r9], 0x6) 11:59:05 executing program 4: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f", @ANYRESDEC], 0x102) 11:59:05 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xf0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@fragment={0x2c, 0x0, 0x0, 0x1, 0x0, 0x15, 0x65}, 0x8) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = dup(r1) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) getsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=""/215, &(0x7f0000000100)=0xd7) 11:59:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 979.411917] Bluetooth: hci3: Malformed Event: 0x2f [ 979.418458] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 979.418506] Bluetooth: hci3: ACL packet for unknown connection handle 200 11:59:15 executing program 4: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f", @ANYRESDEC], 0x102) 11:59:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x1) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x201) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="9811b416240000000000000092675a9eed92a8c20c45248749b781ffffffffffffff462af69d1bfa35600a54599575c5", 0x30}], 0x1) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000200)) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9) 11:59:15 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22}) 11:59:15 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042fffbaf5cd8b4153551670f7f4fd04f86b6bd7d28d1fb3e45fee4b2e1dcb8dfee98cfd16b6078a40d8c7cb8788b3112a2c0a62806950"], 0x102) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xaa}, "e58b4d22aaef738a82787da4fe3cf2ed643ce318869aa7037154a26282e43e8345c41e21bc85422dd72bb9cc4752db3b0906346527a064d488a9e301108d28464cf996ad0b1d28972423ee66f4e20bee3b55a616410604ce3de5d2eafbc194fa7b3c533f23df2947671b3c46d5a172c6882440e26fa24f714c5a99be86019c6ad3a2ef1a1362a3d6feb0062977171ddec657af5193863bbb16643a824aafae53ede8c3ac769d16d35738"}, 0xae) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xf1, 0x4}, {0x1000, 0x7f}}}}, 0x11) 11:59:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:59:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2cacc802e9736b3ec94336f5ae014393bd2a6b6bfa0522de566daf54a8b466", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYRESOCT], 0x2c}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r0, @ANYRES64=r2], 0x102) 11:59:15 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = dup(r1) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r4, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x17, r6}) 11:59:15 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 989.498120] Bluetooth: hci3: Malformed Event: 0x2f [ 989.499835] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 989.500800] Bluetooth: hci3: ACL packet for unknown connection handle 200 11:59:15 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22}) 11:59:15 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:59:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:59:15 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042fffbaf5cd8b4153551670f7f4fd04f86b6bd7d28d1fb3e45fee4b2e1dcb8dfee98cfd16b6078a40d8c7cb8788b3112a2c0a62806950"], 0x102) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xaa}, "e58b4d22aaef738a82787da4fe3cf2ed643ce318869aa7037154a26282e43e8345c41e21bc85422dd72bb9cc4752db3b0906346527a064d488a9e301108d28464cf996ad0b1d28972423ee66f4e20bee3b55a616410604ce3de5d2eafbc194fa7b3c533f23df2947671b3c46d5a172c6882440e26fa24f714c5a99be86019c6ad3a2ef1a1362a3d6feb0062977171ddec657af5193863bbb16643a824aafae53ede8c3ac769d16d35738"}, 0xae) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0xf1, 0x4}, {0x1000, 0x7f}}}}, 0x11) 11:59:15 executing program 6: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22, r1}) 11:59:15 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:59:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) (fail_nth: 1) 11:59:15 executing program 4: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 11:59:15 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x7f, 0x8900) getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000040)=""/125, &(0x7f00000000c0)=0x7d) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=@hopopts={0x32, 0x0, '\x00', [@ra={0x5, 0x2, 0xfffe}]}, 0x10) [ 989.708419] Bluetooth: hci3: Malformed Event: 0x2f [ 989.708939] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 989.708976] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 989.744056] FAULT_INJECTION: forcing a failure. [ 989.744056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 989.745116] CPU: 0 UID: 0 PID: 16096 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 989.745134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 989.745141] Call Trace: [ 989.745146] [ 989.745151] dump_stack_lvl+0xfa/0x120 [ 989.745172] should_fail_ex+0x4d7/0x5e0 [ 989.745190] _copy_from_user+0x30/0xd0 [ 989.745208] copy_msghdr_from_user+0x88/0x150 [ 989.745230] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 989.745251] ? __pfx_perf_trace_lock+0x10/0x10 [ 989.745275] ? lock_acquire+0x15e/0x2f0 [ 989.745295] ___sys_sendmsg+0xdc/0x1b0 [ 989.745314] ? __pfx____sys_sendmsg+0x10/0x10 [ 989.745332] ? perf_trace_lock+0xb5/0x5d0 [ 989.745352] ? __pfx_perf_trace_lock+0x10/0x10 [ 989.745369] ? proc_fail_nth_write+0x97/0x220 [ 989.745390] ? lock_acquire+0x15e/0x2f0 [ 989.745406] ? __fget_files+0x34/0x3b0 [ 989.745421] ? find_held_lock+0x2b/0x80 [ 989.745434] ? __fget_files+0x203/0x3b0 [ 989.745447] ? lock_release+0xc8/0x290 [ 989.745467] ? __fget_files+0x20d/0x3b0 [ 989.745488] __sys_sendmsg+0x150/0x200 [ 989.745507] ? __pfx___sys_sendmsg+0x10/0x10 [ 989.745528] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 989.745546] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 989.745565] ? ksys_write+0x1a3/0x240 [ 989.745581] ? __pfx_ksys_write+0x10/0x10 [ 989.745602] do_syscall_64+0xbf/0x390 [ 989.745619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.745633] RIP: 0033:0x7fb955114b19 [ 989.745644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 989.745657] RSP: 002b:00007fb95268a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 989.745670] RAX: ffffffffffffffda RBX: 00007fb955227f60 RCX: 00007fb955114b19 [ 989.745678] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 989.745686] RBP: 00007fb95268a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 989.745693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 989.745700] R13: 00007fff9244b21f R14: 00007fb95268a300 R15: 0000000000022000 [ 989.745719] 11:59:25 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f"], 0x102) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 11:59:25 executing program 4: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 11:59:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:59:25 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042fffbaf5cd8b4153551670f7f4fd04f86b6bd7d28d1fb3e45fee4b2e1dcb8dfee98cfd16b6078a40d8c7cb8788b3112a2c0a62806950"], 0x102) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xaa}, "e58b4d22aaef738a82787da4fe3cf2ed643ce318869aa7037154a26282e43e8345c41e21bc85422dd72bb9cc4752db3b0906346527a064d488a9e301108d28464cf996ad0b1d28972423ee66f4e20bee3b55a616410604ce3de5d2eafbc194fa7b3c533f23df2947671b3c46d5a172c6882440e26fa24f714c5a99be86019c6ad3a2ef1a1362a3d6feb0062977171ddec657af5193863bbb16643a824aafae53ede8c3ac769d16d35738"}, 0xae) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x1, 0x2043}}}, 0x7) 11:59:25 executing program 6: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22, r1}) 11:59:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:59:25 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=@routing={0xff, 0x10, 0x0, 0x5, 0x0, [@local, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2f}, @loopback, @empty, @mcast2, @mcast1]}, 0x88) 11:59:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) (fail_nth: 2) [ 999.053849] Bluetooth: hci2: Malformed Event: 0x2f [ 999.058955] Bluetooth: hci2: Malformed Event: 0x2f [ 999.071569] Bluetooth: hci3: Malformed Event: 0x2f [ 999.075205] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 999.076498] Bluetooth: hci3: unexpected event for opcode 0x2043 [ 999.092891] FAULT_INJECTION: forcing a failure. [ 999.092891] name failslab, interval 1, probability 0, space 0, times 0 [ 999.094628] CPU: 1 UID: 0 PID: 16116 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 999.094657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 999.094670] Call Trace: [ 999.094677] [ 999.094686] dump_stack_lvl+0xfa/0x120 [ 999.094715] should_fail_ex+0x4d7/0x5e0 [ 999.094746] should_failslab+0xc2/0x120 [ 999.094774] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 999.094811] ? __alloc_skb+0x2ab/0x370 [ 999.094849] ? __alloc_skb+0x2ab/0x370 [ 999.094876] ? __pfx_netlink_insert+0x10/0x10 [ 999.094906] __alloc_skb+0x2ab/0x370 [ 999.094936] ? __pfx___alloc_skb+0x10/0x10 [ 999.094966] ? netlink_autobind.isra.0+0x158/0x370 [ 999.095018] netlink_alloc_large_skb+0x69/0x150 [ 999.095054] netlink_sendmsg+0x66d/0xd80 [ 999.095095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 999.095144] ____sys_sendmsg+0xa67/0xc20 [ 999.095170] ? copy_msghdr_from_user+0xfb/0x150 [ 999.095202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 999.095238] ? lock_acquire+0x15e/0x2f0 [ 999.095272] ___sys_sendmsg+0x10f/0x1b0 [ 999.095306] ? __pfx____sys_sendmsg+0x10/0x10 [ 999.095336] ? perf_trace_lock+0xb5/0x5d0 11:59:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r7, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) [ 999.095372] ? __pfx_perf_trace_lock+0x10/0x10 [ 999.095401] ? proc_fail_nth_write+0x97/0x220 [ 999.095434] ? lock_acquire+0x15e/0x2f0 [ 999.095463] ? __fget_files+0x34/0x3b0 [ 999.095487] ? find_held_lock+0x2b/0x80 [ 999.095509] ? __fget_files+0x203/0x3b0 [ 999.095532] ? lock_release+0xc8/0x290 [ 999.095565] ? __fget_files+0x20d/0x3b0 [ 999.095600] __sys_sendmsg+0x150/0x200 [ 999.095632] ? __pfx___sys_sendmsg+0x10/0x10 [ 999.095676] ? __pfx_ksys_write+0x10/0x10 [ 999.095713] do_syscall_64+0xbf/0x390 [ 999.095741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.095764] RIP: 0033:0x7fb955114b19 sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000b80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000340)={0x7e8, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0x348, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x1}, {0x6, 0xa}, {0x0, 0x6}, {0x6, 0x8}, {0x7, 0x3}, {0x1, 0x5}, {0x6, 0x5}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x3}, {0x5}, {0x7, 0x6}, {0x1, 0x8}, {0x0, 0x5}, {0x1, 0x1}, {0x2}, {0x1, 0x4}, {0x7, 0x9}, {0x2, 0x9}, {0x0, 0x7}, {0x1}, {0x0, 0xa}, {0x5, 0xa}, {0x4, 0x3}, {0x6, 0x9}, {0x3, 0x6}, {0x1, 0x7}, {0x5, 0x8}, {0x0, 0x3}, {0x5, 0x8}, {0x3, 0x2}, {0x1, 0x7}, {0x7, 0x7}, {0x4, 0x7}, {0x7, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x100, 0x5, 0x9, 0x9, 0x8, 0x15eb]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x6c, 0x1b, 0x3, 0x5, 0x1b]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x16, 0x48]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x4, 0x1b, 0x4d, 0x30, 0x1b, 0x6, 0x4, 0x6c, 0x36, 0x6, 0x1b, 0x3, 0x2, 0x0, 0x6c, 0x36, 0x6]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x1b, 0xc, 0x36, 0x60, 0x1b, 0x6, 0xc, 0xc, 0x1b, 0x6, 0x4, 0x24, 0x12, 0x16, 0x30, 0x3, 0x9c7e7a103ca39994, 0x30, 0x1b, 0x21]}]}, @NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x3, 0x9}, {0x1, 0x4}, {0x1, 0xa}, {0x6, 0x1}, {0x4, 0x2}, {0x5, 0x3}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0x5}, {0x5, 0x5}, {0x5, 0x7}, {0x0, 0x8}, {0x0, 0x1}, {0x4, 0x8}, {0x1, 0x5}, {0x2, 0x6}, {0x2, 0x8}, {0x2, 0x2}, {0x5, 0x7}, {0x0, 0x6}, {0x4, 0x2}, {0x0, 0x9}, {0x1, 0x6}, {0x1, 0xa}, {0x5, 0x2}, {0x1, 0x3}, {0x1, 0x1}, {0x3}, {0x4, 0x6}, {0x3, 0x3}, {0x1}, {0x7, 0x8}, {0x0, 0x8}, {0x6, 0x8}, {0x6, 0x5}, {0x1, 0x5}, {0x0, 0x8}, {0x1, 0x1}, {0x4}, {0x5}, {0x3}, {0x1, 0x4}, {0x0, 0x5}, {}, {0x0, 0x6}, {}, {0x6, 0xa}, {0x1, 0x8}, {0x0, 0xa}, {0x0, 0xa}, {0x1, 0xa}, {0x0, 0x8}, {0x6, 0x9}, {0x0, 0x7}, {0x4, 0x1}, {0x6, 0x6}, {0x6, 0x5}, {0x3, 0x6}, {0x3, 0x3}, {0x6, 0x3}, {0x4, 0x5}, {0x5, 0x9}, {0x3, 0x7}, {0x5, 0x2}, {0x1, 0x6}, {0x1, 0x3}, {0x6, 0x6}, {0x7, 0x6}, {0x7, 0x1}, {0x2, 0x2}, {0x7, 0x9}, {}, {}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfb39, 0xab, 0x6, 0x4, 0x6, 0x0, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x8001, 0x2, 0x200, 0x100, 0x101, 0xff, 0x80]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0x12, 0x18, 0x48, 0x0, 0x60, 0x9, 0x12, 0x2, 0x16, 0x6c, 0x5, 0x3, 0xc, 0x48, 0x6c, 0x30, 0xc, 0x1b, 0x0, 0x6c, 0x1b, 0x16, 0x60, 0x4d]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x7d, 0x24, 0xbff7c8e5e6db8d3e, 0x7]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe75, 0x1, 0x9, 0x101, 0x0, 0x3ff, 0x1, 0xf5a]}}]}, @NL80211_BAND_5GHZ={0x94, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x50e, 0xff80, 0x8, 0xd87, 0x3f, 0x8, 0xc000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x200, 0x4, 0x9, 0xaaf, 0x0, 0x787]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x36, 0x1b, 0x4, 0x1b, 0x39, 0x2d, 0x5, 0x1, 0x1b, 0x30, 0x5, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xd45, 0x8, 0x4, 0x2f1, 0x19d3, 0x1, 0x8]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x48, 0x9, 0x30, 0x16]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x4, 0x8}, {0x4, 0x1}, {0x6, 0xa}, {0x4, 0x8}, {0x6, 0x9}, {0x3, 0x1}, {0x1, 0x9}, {0x5, 0x3}, {0x4, 0x6}, {0x6, 0xa}, {0x6}, {0x1, 0x6}, {0x4, 0x1}, {0x6, 0x6}, {0x7, 0x6}, {0x7, 0x2}, {0x2, 0x4}, {0x2, 0x3}, {0x0, 0x9}, {0x3, 0x8}, {0x2, 0x2}, {0x1, 0x6}, {0x3, 0x9}, {0x0, 0x3}, {0x3}, {0x5, 0x9}, {0x1, 0x5}, {0x1, 0x3}, {0x7}, {0x3}, {0x7, 0x3}, {0x3, 0x4}, {0x7, 0x4}, {0x7, 0x9}, {0x3, 0x9}, {0x0, 0x5}, {0x6, 0x3}, {0x4, 0x6}, {0x2, 0x4}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0x1, 0x2, 0x12, 0x60, 0xb, 0x36, 0x30, 0x1]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1, 0x6c, 0x1, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xdf20b39acdfbb57f, 0xc, 0x48, 0x1, 0x14aafdc4637839ad, 0x5, 0x12, 0x5, 0x1, 0xc, 0xc, 0xb, 0x1, 0x16, 0x36, 0x1, 0x1b, 0x18, 0xc, 0x6, 0x16, 0x16, 0x6c, 0x9]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x2, 0x7}, {0x5, 0x1}, {0x0, 0x4}, {0x7, 0x8}, {0x2, 0xa}, {0x2, 0x9}, {0x1, 0x5}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xb, 0x0, 0x9, 0x6, 0x18, 0x24, 0x1, 0x12, 0x4, 0xc, 0x60, 0x1b, 0xc, 0x12, 0x2, 0xb, 0x60, 0x30, 0x1e, 0x24, 0x9]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x60, 0x48, 0x6c, 0x16, 0x6c, 0x48, 0x30, 0x36, 0x1b, 0x5, 0x4, 0x2, 0x16, 0x1, 0x30, 0x1b, 0x1, 0x36, 0x16, 0x16, 0x16, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x2, 0x8, 0xffff, 0x8, 0x0, 0x8, 0x200]}}]}, @NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x14, 0x8, 0x3a0, 0x9, 0x6c3, 0x0, 0x2bb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x4, 0x5}, {0x0, 0x5}, {0x3, 0x7}, {0x3, 0x4}, {0x5, 0x6}, {0x2, 0x6}, {0x7, 0x4}, {0x3, 0x3}, {0x7, 0x4}, {0x4}, {0x7, 0x9}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x9}, {0x0, 0x6}, {0x7}, {0x5}, {0x0, 0x8}, {0x2}, {0x5, 0x6}, {0x4, 0x9}, {0x1, 0x3}, {0x0, 0x2}, {0x2, 0x5}, {0x4, 0x5}, {0x5}, {0x4, 0x7}, {0x0, 0x1}, {0x5, 0x4}, {0x1}, {0x3, 0x7}, {0x5, 0x5}, {0x5}, {0x0, 0xa}, {0x1, 0x3}, {0x4, 0xa}, {0x5}, {0x6, 0x5}, {0x6, 0x3}, {0x1, 0x6}, {0x0, 0x6}, {0x3, 0x2}, {0x0, 0x2}, {0x6, 0x6}, {0x4, 0x4}, {0x0, 0x7}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x7, 0x4}, {0x5, 0x7}, {0x1, 0x1}, {0x4, 0x4}, {0x3, 0x5}, {0x2, 0xa}, {0x5, 0x7}, {0x4, 0x1}, {0x1, 0x8}, {0x6, 0x8}, {0x4, 0x3}, {0x5, 0xa}, {0x5, 0x2}, {0x6, 0x4}, {0x5, 0x9}, {0x0, 0x7}, {0x0, 0x2}, {0x1, 0x6}, {0x6, 0x8}, {0x7, 0x2}, {0x1, 0xa}, {0x2, 0x2}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0x5}, {0x3, 0x7}, {0x5}, {0x5}, {0x6, 0x3}, {0x0, 0x6}, {0x2, 0x1e}, {0x6, 0x5}, {0x4, 0x7}, {0x3}, {0x7, 0x7}, {0x7, 0x9}, {0x7, 0x1}, {0x3, 0x1}, {0x1, 0x3}, {0x0, 0x2}, {0x1, 0x2}, {0x3, 0x6}, {0x2, 0x8}, {0x1, 0x7}, {0x1, 0x2}, {0x5, 0x1}, {0x0, 0x7}, {0x0, 0x5}, {0x2, 0x3}, {0x5, 0xa}, {0x3, 0x3}, {0x1, 0x9}, {0x2, 0x5}, {0x1, 0x8}, {0x6, 0x9}, {0x2, 0x5}, {0x4, 0x9}, {0x6, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x6, 0x3f, 0x1, 0x4, 0x4, 0xfff, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0x2c0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x3, 0x7}, {0x0, 0x7}, {0x7, 0x9}, {0x6, 0x8}, {0x1, 0x6}, {0x1, 0x4}, {0x1, 0x5}, {0x0, 0x4}, {0x2, 0x2}, {0x4, 0x3}, {0x0, 0x7}, {0x2, 0x6}, {0x5, 0xa}, {0x4, 0x3}, {0x4}, {0x3, 0x1}, {0x1, 0x8}, {0x6, 0x3}, {0x1, 0x4}, {0x7, 0x9}, {0x4, 0x4}, {0x3, 0x2}, {0x5, 0x3}, {0x3, 0x9}, {0x3, 0x3}, {0x3, 0x2}, {0x7}, {0x1, 0x6}, {0x5, 0x1}, {0x7, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x5, 0xb8, 0x5, 0x6, 0xc439, 0x9, 0x81]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x2, 0x5}, {0x2, 0x5}, {0x7, 0x8}, {0x4, 0x7}, {0x5, 0x8}, {0x3, 0x9}, {0x1}, {0x3, 0x9}, {0x4, 0x9}, {0x6, 0x9}, {0x1, 0x5}, {0x2, 0x8}, {0x7, 0x2}, {0x4, 0x4}, {0x6, 0x9}, {0x7, 0x6}, {0x0, 0x4}, {0x1, 0x5}, {0x6}, {0x1, 0x8}, {0x3, 0x7}, {0x0, 0xa}, {0x5, 0x9}, {0x5, 0xa}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x10, 0x3, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0xc, 0x4, 0x0, 0x5, 0x2, 0x12, 0x56, 0x2, 0x28, 0x3, 0xc, 0xc, 0x36, 0x9, 0x24, 0xb, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x36, 0x13b5, 0x0, 0x4a, 0x876, 0x4, 0x8, 0x8]}}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x1, 0x8, 0x9, 0x2, 0x38, 0x8, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0xf07, 0x4, 0x8, 0x40, 0x4, 0x72]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x52, 0x8a0b, 0x7fff, 0x0, 0x80, 0x8, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x3, 0x8001, 0x1, 0x2, 0x4, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x200, 0x3ff, 0x7ff, 0x401, 0x200, 0x8]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x1a, 0x6, 0x5, 0xb, 0x6, 0x2, 0x6c, 0x24, 0x48, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff8, 0x7, 0x3, 0x4, 0x1f, 0x100, 0x2, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0xfffb, 0x9, 0x101, 0x800, 0x8, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x4, 0x36, 0x3, 0x36, 0x18, 0x9, 0x18, 0x4, 0x6, 0x5, 0x60, 0x60, 0x24, 0x4, 0x1b, 0x2, 0x1b, 0x3, 0x48, 0x5, 0xb, 0x30, 0x48, 0xf, 0x1, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x80, 0x4, 0x13fe, 0xf36, 0x401, 0x7f, 0x6]}}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1, 0x12, 0x0, 0x1b, 0x6, 0x16, 0x18, 0x1b, 0x48, 0x6f, 0x36, 0xb, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7098, 0x8001, 0x3, 0x7ff, 0x2, 0x200, 0x401]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{}, {0x5}, {}, {0x7, 0x4}, {0x6, 0x7}, {0x6}, {0x4, 0x1}, {0x4, 0xa}, {0x7, 0x1}, {0x7, 0x2}, {0x5, 0x9}, {0x2, 0x7}, {0x2, 0x3}, {0x2, 0x6}, {0x1, 0x1}, {0x3, 0x9}, {0x1, 0x6}, {0x0, 0x6}, {0x6, 0x1}, {0x4, 0x6}, {0x2, 0x2}, {0x1, 0x2}, {0x2}, {0x4, 0x6}, {0x5, 0x2}, {0x2, 0x9}, {0x1, 0x5}, {0x5, 0x1}, {0x4, 0x3}, {0x1, 0x2}, {0x0, 0x6}, {0x6, 0xa}, {0x5, 0xa}, {0x7, 0x2}, {0x3, 0x3}, {0x6, 0x3}, {0x7, 0x8}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8001, 0xae1e, 0xe00, 0x200, 0x3, 0x8000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x5, 0x8}, {0x0, 0x9}, {0x1}, {0x1}, {0x6, 0x7}, {0x1, 0x5}, {0x2, 0x2}, {0x4, 0x2}, {0x7, 0x7}, {0x3, 0x4}, {0x4, 0x2}, {0x6, 0x8}, {0x7, 0x4}, {0x1, 0x7}, {0x2, 0x1}, {0x0, 0x9}, {0x5, 0x5}, {0x6, 0x4}, {0x3, 0x4}, {0x0, 0x4}, {0x4, 0x7}, {0x6, 0x7}, {0x1, 0x2}, {0x6}, {0x5, 0x1}, {0x4, 0x5}, {0x1}, {0x6, 0x6}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0x5}, {0x6, 0x7}, {0x4, 0x2}, {0x7, 0x4}, {0x6, 0x7}, {0x1, 0x5}, {0x0, 0x5}, {0x3, 0xa}, {0x5, 0x7}, {0x0, 0x4}, {0x5, 0x5}, {0x0, 0x2}, {0x5, 0x2}, {0x1, 0x3}, {0x4, 0x2}, {0x2, 0x9}, {}, {0x3, 0x6}, {0x3, 0x3}, {0x0, 0x8}, {0x5, 0x7}, {0x5, 0x19}, {0x1, 0x1}, {0x5, 0x3}, {0x6, 0x8}, {0x4, 0x4}, {0x5, 0x5}]}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x2, 0x6}, {0x7, 0x7}, {0x0, 0x5}, {0x1, 0x6}, {0x6, 0x8}, {0x1}, {0x2, 0x4}, {0x7, 0x7}, {0x0, 0x6}, {0x3, 0x3}, {0x6, 0xa}, {0x1, 0xa}, {0x4, 0x8}, {0x1, 0x2}, {0x4, 0x5}, {0x0, 0xa}, {0x1, 0x1}, {0x6, 0x6}, {0x3, 0x8}, {0x0, 0x5}, {0x0, 0x2}, {0x0, 0x3}, {0x5, 0x3}, {0x3, 0x8}, {0x0, 0x3}, {0x0, 0x4}, {0x0, 0x2}, {0x1, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x1, 0x80, 0x9, 0x0, 0x6, 0x81]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x2, 0x1}, {0x1, 0x4}, {0x4, 0x1}, {0x6}, {0x1, 0x4}, {0x0, 0x1}, {0x0, 0x6}, {0x4}, {0x3, 0x2}, {0x6, 0x1}, {0x1, 0x8}, {0x2, 0x2}, {0x2, 0x8}, {0x1, 0x6}, {}, {0x0, 0x1}, {0x0, 0x4}, {0x1, 0x8}, {0x5, 0x7}, {0x4, 0x8}, {0x1}, {0x4, 0xa}, {0x2, 0x5}, {0x3, 0x1}, {}, {0x5, 0x4}, {0x6, 0x2}, {0x6, 0x1}, {0x2, 0x9}, {0x0, 0x9}, {0x0, 0x2}, {0x0, 0x4}, {0x0, 0x5}, {0x0, 0x3}, {0x1, 0xa}, {0x3, 0x3}, {0x6, 0x8}, {0x1, 0x2}, {0x4, 0x4}, {0x4, 0x1}, {0x4, 0x3}, {0x6, 0x3}, {0x3, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0x1c4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x6, 0x8000, 0x8705, 0x3, 0x3ff, 0x7, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x800, 0x1f, 0x200, 0x5, 0x2, 0x7a]}}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x9, 0xc, 0x3a, 0x79, 0x6c, 0x36, 0x12, 0x30, 0x48, 0xc, 0x1b, 0x4, 0x12, 0x1, 0x16, 0x6c, 0x36, 0xd, 0x2]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x24, 0x48, 0x4, 0x16, 0x30, 0x1b, 0xb, 0xc, 0x18, 0xc, 0x4, 0x4, 0x46, 0x9, 0x4, 0x36, 0x5, 0x12, 0x6, 0x18, 0x6c, 0x5, 0x6c, 0x1b, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x7, 0x3}, {0x7, 0x7}, {0x3, 0x9}, {0x4, 0x6}, {0x2, 0x4}, {0x3, 0x7}, {0x1, 0x2}, {0x1, 0x5}, {0x2, 0x4}, {0x7, 0x5}, {0x7, 0x9}, {0x0, 0x7}, {0x1, 0x1}, {0x2, 0x6}, {0x4, 0x3}, {0x4, 0x8}, {0x7, 0x4}, {0x7, 0x6}, {0x5, 0x8}, {0x2, 0x7}, {0x6, 0x2}, {0x6, 0x7}, {0x2, 0x3}, {0x6, 0xa}, {0x2, 0x7}, {0x2}, {0x6, 0x8}, {0x6, 0x8}, {0x5, 0x2}, {0x4, 0x3}, {0x3, 0x4}, {0x3, 0x2}, {0x0, 0xa}, {0x2}, {0x0, 0x9}, {0x0, 0x2}, {0x4, 0x8}, {0x5, 0x8}, {0x2, 0x6}, {0x0, 0x7}, {0x6, 0x8}, {0x0, 0x4}, {0x1, 0x1}, {0x4, 0x4}, {0x2, 0x3}, {0x0, 0x2}, {0x7, 0x6}, {0x6, 0x5}, {0x3, 0x3}, {0x1, 0xa}, {0x6, 0x5}, {0x6, 0x3}, {0x1, 0x4}, {0x1, 0x9}, {0x2, 0x6}, {0x5, 0x4}, {0x6, 0x2}, {0x5, 0xa}, {0x2, 0x4}, {0x3, 0x1}, {0x0, 0xa}, {0x3, 0x5}, {0x3, 0x9}, {0x0, 0x2}, {0x2, 0x3}, {0x6, 0x2}, {0x6, 0x1}]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x6}, {0x1}, {0x5, 0x7}, {0x7, 0x9}, {0x2, 0xa}, {0x4, 0x9}, {0x7, 0x2}, {0x3, 0x8}, {0x3, 0x5}, {0x0, 0xa}, {0x3}, {0x0, 0x9}, {0x2, 0x1}, {0x3, 0x8}, {0x0, 0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x9}, {0x6, 0x9}, {0x0, 0x7}, {0x2, 0x4}, {0x2, 0x4}, {0x2, 0x8}, {0x6, 0x9}, {0x2, 0x2}, {0x3, 0x8}, {0x1, 0x5}, {0x5, 0x1}, {0x3}, {0x4, 0x2}, {0x1, 0x7}, {0x7, 0x3}, {0x3, 0x9}, {0x5, 0x1}, {0x6, 0xa}, {0x3, 0x7}, {0x2, 0x6}, {0x7, 0x5}, {0x3, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0xc, 0x18, 0x6c, 0xb, 0x46, 0x9, 0x12, 0x2e55cdf2ab2e8fbe, 0x3, 0x16, 0x18, 0x1, 0x6, 0x30, 0x6c, 0x30, 0x2, 0x12, 0x1, 0x9, 0x24, 0x48]}]}, @NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x3, 0x2, 0xfff, 0xfffc, 0x8, 0x5]}}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0x6}, {0x4, 0x6}, {0x1, 0x3}, {0x5, 0x1}, {0x2, 0x5}, {0x6, 0x6}, {0x1, 0x7}, {0x3, 0x8}, {0x0, 0x7}, {0x1, 0x7}, {0x7, 0x4}, {0x3, 0x8}, {}, {}, {0x7, 0x4}, {0x6, 0x7}, {0x7, 0x6}, {0x4, 0x1}, {0x7, 0x9}, {0x1, 0xa}, {0x1, 0x8}, {0x6, 0x6}, {0x4, 0x4}, {0x3, 0x3}, {0x2, 0x2}, {0x5, 0x6}, {0x2, 0x8}, {0x6, 0x9}, {0x5, 0x2}, {0x2, 0x1}, {0x0, 0x8}, {0x7, 0x1}, {0x2, 0x3}, {0x0, 0x8}, {0x0, 0xa}, {0x0, 0x8}, {0x1, 0xa}, {0x4, 0x9}, {0x4, 0x4}, {0x6, 0xa}, {0x1, 0x2}, {0x3, 0x3}, {0x5, 0x1}, {0x1, 0x4}, {0x6, 0x3}, {0x3}, {0x4, 0x4}, {0x1, 0x2}, {0x7, 0x2}, {0x0, 0xa}, {0x3, 0x2}, {0x6, 0x5}, {0x7, 0x6}, {0x7, 0x4}, {0x6, 0xa}, {0x0, 0x4}, {0x6, 0x5}, {0x7, 0x9}, {0x1}, {0x7, 0x5}, {0x3, 0x2}, {0x1, 0x9}, {0x6, 0x4}, {0x3, 0x1}, {0x6, 0x3}, {0x0, 0x1}, {0x3, 0x2}, {0x3, 0x1}, {0x2, 0x6}, {0x6, 0x4}, {0x5, 0xa}, {0x6, 0xa}, {0x4, 0x6}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b4, 0x9, 0xfeca, 0x40, 0x5825, 0x3, 0xdab, 0x1]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x48, 0xa, 0x36]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x3, 0x48, 0xe47752e3e8cd937a, 0x2, 0x36]}]}]}]}, 0x7e8}, 0x1, 0x0, 0x0, 0x20000045}, 0x8000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1906b7909ccbf35}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x7c, r9, 0x0, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0xf, 0x24, [{0x3, 0x1}, {0x7e, 0x1}, {0x6c}, {0x1}, {0x12, 0x1}, {0x3, 0x1}, {0x6, 0x1}, {0x12, 0x1}, {0x16}, {0xb}, {0x18, 0x1}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x58}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4ff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x52142de88e973625) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x102) [ 999.095781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 999.095801] RSP: 002b:00007fb95268a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 999.095822] RAX: ffffffffffffffda RBX: 00007fb955227f60 RCX: 00007fb955114b19 [ 999.095836] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 999.095849] RBP: 00007fb95268a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 999.095862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.095874] R13: 00007fff9244b21f R14: 00007fb95268a300 R15: 0000000000022000 [ 999.095906] 11:59:25 executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042fffbaf5cd8b4153551670f7f4fd04f86b6bd7d28d1fb3e45fee4b2e1dcb8dfee98cfd16b6078a40d8c7cb8788b3112a2c0a62806950"], 0x102) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x1, 0x2043}}}, 0x7) 11:59:25 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = accept$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x1c) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x63}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@rand_addr=0x64010102, 0x4e24, 0xfffc, 0x4e20, 0xe5, 0xa, 0x0, 0x20, 0x32, 0x0, 0xee00}, {0x101, 0x8, 0x7, 0xffffffff, 0x9, 0x9, 0xdbd3, 0xfffffffffffff6d9}, {0xf07, 0x400, 0x2, 0x200}, 0x7, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in=@remote, 0x4d6, 0x6c}, 0x2, @in6=@empty, 0x0, 0x4, 0x0, 0x7, 0x7ff, 0x8, 0x688e}}, 0xe8) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x4e24, 0xffffffff, @local, 0x2}, {0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}, 0xc6d, [0x7, 0x2, 0x4, 0x8, 0x0, 0x9, 0xea]}, 0x5c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'sit0\x00'}) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh={0x0, 0x200001eb, 0x4, 0x0, 0x7, 0x70}, 0x8) 11:59:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:59:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 999.320240] Bluetooth: hci3: Malformed Event: 0x2f [ 999.323252] Bluetooth: hci3: unexpected event for opcode 0x2043 11:59:34 executing program 6: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22, r1}) 11:59:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:59:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:59:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) syz_emit_vhci(&(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0xffffffffffffff70) 11:59:34 executing program 4: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 11:59:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) (fail_nth: 3) 11:59:34 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x1, 0x2043}}}, 0x7) 11:59:34 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup(r0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000000)={0x62, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x3}]}, 0x10) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) 11:59:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:59:34 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f"], 0x102) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x5, 0x1, 0x4, 0x96, 0x20, 0x8}}}, 0xe) [ 1008.688190] Bluetooth: hci3: unexpected event for opcode 0x2043 11:59:34 executing program 4: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 11:59:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 1008.790450] Bluetooth: hci2: Malformed Event: 0x2f [ 1008.791031] Bluetooth: hci2: Malformed Event: 0x2f 11:59:34 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) 11:59:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:59:34 executing program 2: syz_emit_vhci(0x0, 0x0) 11:59:43 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) 11:59:43 executing program 4: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 11:59:43 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f"], 0x102) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x2, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x33}, "f4c49ce337e3a34e7045157b87b79358f073eaddf341b2d9d313b6502db57e61de781925586fb7e150ea81ae2f18797b8bc3b9"}, 0x37) 11:59:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:59:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) (fail_nth: 4) 11:59:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:59:43 executing program 2: syz_emit_vhci(0x0, 0x0) [ 1017.852581] Bluetooth: hci2: Malformed Event: 0x2f [ 1017.854253] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1017.855111] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 1017.855922] Bluetooth: hci2: Malformed Event: 0x2f [ 1017.857140] Bluetooth: hci2: ACL packet for unknown connection handle 200 11:59:44 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)={0x0, 0x7, 0x90, {0x90, 0xa, "eedc7588bba703955dd7a44ff40fa6daa0e8216b339b2f4e718cf7aebbfed95a45d568a55f241a31acf95bbaa0c57a7ff238bc90a43ab1f287ca7898a6cb6b1f1a5e9de24aa7a228085b6e9763809221a1ff9aabdc277de18c2390479ad58abed96f4df93ad22ee9a719e9930528a4df960b7e72fd807efa91f9d291fb73d793de02101b8ade72e1908d42f00a06"}}, &(0x7f00000000c0)={0x0, 0x3, 0x40, @string={0x40, 0x3, "1817ba578a0240684a09790e6be1c07f0268c3a6bbcad4190d06e234c2be2e9b6991cb5abd9b04e149767e8c8ac2c27090e1f208a158331c1f0289e39fef"}}, &(0x7f0000000140)={0x0, 0x22, 0xd, {[@local=@item_4={0x3, 0x2, 0xa, "a483fd1f"}, @global=@item_012={0x2, 0x1, 0x4, "33c7"}, @main=@item_4={0x3, 0x0, 0x9, "dcbb027a"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x4, 0x1, {0x22, 0x56}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x0, 0xe, 0x7e, "41d9508ee8ab721af81dcbbaa2dfbcc062e63eb2939f28e77a4f7ed272d4b486fd119551f2a2a0a456c4519fb292eb9976e5b723e14a9f060129245c336c5af47c5c6d4afa4f9435f364adaa04e47f72809c9fc18d81d4e7c82a342cef7ad2a0aa0e535026740c8010ae6b71ef50c5d8d3aa23723acc0ce5981ce0cb0079"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000340)={0x20, 0x1, 0x51, "648961812529fd6504bfcec6faa930a531f9a901f59a0a2a99bff88aacd679191d0144f5a1e08f72ecc6c6bc2b1a90e4a2714890601bbfa053e38bea9ceaef4355af202dabd5c478f70ab7af77d23d6f7a"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x16}}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) 11:59:44 executing program 4: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 11:59:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) (fail_nth: 5) [ 1017.868174] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 1017.915113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.918477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 11:59:44 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) 11:59:44 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:59:44 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="062f10267f"], 0x102) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0xff18) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}}}, 0x4) 11:59:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:59:44 executing program 2: syz_emit_vhci(0x0, 0x0) 11:59:44 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x3, 0x8, 0x100, 0x0, 0x0, 0x22, r2}) 11:59:44 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 1018.069358] Bluetooth: hci2: hardware error 0x00 11:59:44 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x100, 0x0, 0x0, 0x22, r2}) 11:59:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) (fail_nth: 6) 11:59:44 executing program 0: r0 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x265, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xc0, 0x3e, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x1be, 0x5, 0x1, {0x22, 0x13}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x5, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x1, 0x7, 0x2, 0x20, 0xa9}, 0x2d, &(0x7f0000000100)={0x5, 0xf, 0x2d, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "cff7a8828b3b234c25687df54c0dd730"}, @ss_container_id={0x14, 0x10, 0x4, 0xb8, "42a309be2d905eb432a7aabac29f2126"}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41f}}, {0x82, &(0x7f0000000240)=@string={0x82, 0x3, "cae7372cce5aebc128374061940e0ecd5e1926fbe77a1f1fada6742c123ae1d0bd5d1e7b3c28f2b5eb97cb5d34407ad89aa3c2acb423dac4d54422bdb91f9d274ffa26c202e81f94d836890769e5c57506c2896a8d8a9a7d869c5ccd2f21f1acd64a89944aaf046ba49b64a03d9bc47760dd3757fff2fe35c851a079be33cfca"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f00000003c0)={0x40, 0xb, 0x43, {0x43, 0x6, "b0f590a1f01d36f9d0d5a029597e1ddaf937520a7a0ef921b8a59e623c019769df09ff20a14b1814a5cc3367022a23f15ddfb205e6efad236e738e1e1252627329"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}, &(0x7f0000000480)={0x0, 0x22, 0x14, {[@local=@item_012={0x1, 0x2, 0x8, "ab"}, @local=@item_4={0x3, 0x2, 0x4, "b88d1717"}, @global=@item_012={0x2, 0x1, 0x6, '/u'}, @local=@item_4={0x3, 0x2, 0x4, "29aae843"}, @main=@item_4={0x3, 0x0, 0x0, "666cf73a"}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x6, 0x1, {0x22, 0xb58}}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000540)={0x0, 0x14, 0xc0, "84c4f6fafe2a0482a704487a1112de5932d6f5f96550a2479ae8061afdf3f599ffed45d169cc82226795467ed8d9512005dedc994b1d9cbabf3cc7813b6cb970bbd520e46b7446c4cbf27d253671b0c8c008090569a588a8f6279c3ebfe7e72b6e461373c532709877396031be792372e41d02ba8d29d04e7fc68f309adb291f45d47da3f3c3427250194af1722f4c108f0ba6edf435ac3963706679da9d933b435089d7eed99fb2244891070bb3d2de236c850d79393ed69a3bd4d2f53703ed"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000006c0)={0x20, 0x1, 0xc4, "ab73715ff71af5fbfc1de78b85b885c011cbfd8d65ce3468d7012a5a8bdb8e452c7de3647322d16aac9f9ee14ade12a33572ddc71044d99adb576e7e54cb702b60ec95d2c7dba9b934c475fc1c8d5df81befb7b640470ec611811f33e858deb7c2372da76577da508081bc426652f870ceab5309ab86ff6d771d5a43be645f6f5c53a07e18acee1e5f6fb429d95a4c749e042bc6be8943b0f8f14d5e40a8067c04a4d01bddaaf8e69f39c3cbbf4814a0f98079d0eaaf1b7d25c94f247b4ae094c3e1391e"}, &(0x7f00000007c0)={0x20, 0x3, 0x1}}) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000040)=0xff) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f"], 0x102) 11:59:44 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) [ 1018.075338] Bluetooth: hci2: unexpected event 0x10 length: 4 > 1 [ 1018.193499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.202214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.216433] Bluetooth: hci2: Malformed Event: 0x2f [ 1018.232467] FAULT_INJECTION: forcing a failure. [ 1018.232467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.233551] CPU: 0 UID: 0 PID: 16218 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1018.233568] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1018.233575] Call Trace: [ 1018.233580] [ 1018.233585] dump_stack_lvl+0xfa/0x120 [ 1018.233604] should_fail_ex+0x4d7/0x5e0 [ 1018.233621] _copy_from_iter+0x1dc/0x1660 [ 1018.233636] ? lock_acquire+0x15e/0x2f0 [ 1018.233653] ? __virt_addr_valid+0x1c6/0x5d0 [ 1018.233667] ? find_held_lock+0x2b/0x80 [ 1018.233681] ? __pfx__copy_from_iter+0x10/0x10 [ 1018.233694] ? lock_release+0xc8/0x290 [ 1018.233713] ? __virt_addr_valid+0x100/0x5d0 [ 1018.233726] ? __check_object_size+0x57b/0x880 [ 1018.233743] netlink_sendmsg+0x800/0xd80 [ 1018.233766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1018.233792] ____sys_sendmsg+0xa67/0xc20 [ 1018.233808] ? copy_msghdr_from_user+0xfb/0x150 [ 1018.233825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1018.233844] ? lock_acquire+0x15e/0x2f0 [ 1018.233862] ___sys_sendmsg+0x10f/0x1b0 [ 1018.233880] ? __pfx____sys_sendmsg+0x10/0x10 [ 1018.233896] ? perf_trace_lock+0xb5/0x5d0 [ 1018.233915] ? __pfx_perf_trace_lock+0x10/0x10 [ 1018.233931] ? proc_fail_nth_write+0x97/0x220 [ 1018.233949] ? lock_acquire+0x15e/0x2f0 [ 1018.233964] ? __fget_files+0x34/0x3b0 [ 1018.233978] ? find_held_lock+0x2b/0x80 [ 1018.233994] ? __fget_files+0x203/0x3b0 [ 1018.234006] ? lock_release+0xc8/0x290 [ 1018.234025] ? __fget_files+0x20d/0x3b0 [ 1018.234043] __sys_sendmsg+0x150/0x200 [ 1018.234060] ? __pfx___sys_sendmsg+0x10/0x10 [ 1018.234084] ? __pfx_ksys_write+0x10/0x10 [ 1018.234104] do_syscall_64+0xbf/0x390 [ 1018.234121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.234134] RIP: 0033:0x7fb955114b19 [ 1018.234143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1018.234155] RSP: 002b:00007fb95268a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1018.234167] RAX: ffffffffffffffda RBX: 00007fb955227f60 RCX: 00007fb955114b19 [ 1018.234176] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1018.234183] RBP: 00007fb95268a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1018.234190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.234197] R13: 00007fff9244b21f R14: 00007fb95268a300 R15: 0000000000022000 [ 1018.234214] [ 1018.427972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.430325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.718542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.721345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.723610] Bluetooth: hci2: Malformed Event: 0x2f [ 1020.102091] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1020.103206] Bluetooth: hci2: hardware error 0x00 [ 1022.150052] Bluetooth: hci2: Opcode 0x0c03 failed: -110 11:59:54 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="6fc55da343142f14067d"], 0x102) 11:59:54 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="6d3c775db3ab7cc6b9a33bbd919558130db740a7df10cb73f343f1e33880b848c235c188baf20a82c5c76feced0adaad49a439b39bf6eea6a1927317ced88f14e6cf5473b61c0bee6a344ec131d5ef5a74ae67a05d0865a4a9f9f272d45c5132bb86d94ff4adc596453ebfc56df032701cafa9180ada0853d158f975a9bd1e16f38ac6253f70129a4fe8783f17a905762764aa1d33c2007f1b0968f78ca49bfae683b960c0cc3b2c19088c870405b594090ba08918eec6841f2ca3fde7bbf8a62c4450c89198e35d5eb0dc2950e01e2763f99f56be"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) 11:59:54 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x2043}}}, 0x7) 11:59:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 11:59:54 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x0, 0x100, 0x0, 0x0, 0x22, r2}) 11:59:54 executing program 4: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 11:59:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 11:59:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) (fail_nth: 7) 11:59:54 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x2043}}}, 0x7) 11:59:54 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x0, 0x100, 0x0, 0x0, 0x22, r2}) [ 1028.104184] FAULT_INJECTION: forcing a failure. [ 1028.104184] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.106337] CPU: 1 UID: 0 PID: 16242 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1028.106368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1028.106380] Call Trace: [ 1028.106388] [ 1028.106396] dump_stack_lvl+0xfa/0x120 [ 1028.106427] should_fail_ex+0x4d7/0x5e0 [ 1028.106457] should_failslab+0xc2/0x120 [ 1028.106486] __kmalloc_noprof+0xcd/0x680 [ 1028.106520] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1028.106547] ? avc_has_perm_noaudit+0x150/0x3d0 [ 1028.106583] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1028.106616] genl_family_rcv_msg_doit+0xab/0x2f0 [ 1028.106641] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1028.106665] ? trace_cap_capable+0x156/0x1b0 [ 1028.106693] ? cap_capable+0x9c/0x240 [ 1028.106719] ? security_capable+0x2f/0x90 [ 1028.106743] ? ns_capable+0xe2/0x120 [ 1028.106769] genl_rcv_msg+0x532/0x7e0 [ 1028.106810] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1028.106847] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1028.106879] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 1028.106899] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1028.106937] netlink_rcv_skb+0x147/0x430 [ 1028.106973] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1028.107006] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1028.107055] ? netlink_deliver_tap+0x1ae/0xce0 [ 1028.107094] genl_rcv+0x28/0x40 [ 1028.107112] netlink_unicast+0x5a7/0x870 [ 1028.107151] ? __pfx_netlink_unicast+0x10/0x10 [ 1028.107201] netlink_sendmsg+0x8a3/0xd80 [ 1028.107241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1028.107290] ____sys_sendmsg+0xa67/0xc20 [ 1028.107316] ? copy_msghdr_from_user+0xfb/0x150 [ 1028.107348] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1028.107384] ? lock_acquire+0x15e/0x2f0 [ 1028.107418] ___sys_sendmsg+0x10f/0x1b0 [ 1028.107452] ? __pfx____sys_sendmsg+0x10/0x10 [ 1028.107481] ? perf_trace_lock+0xb5/0x5d0 [ 1028.107517] ? __pfx_perf_trace_lock+0x10/0x10 [ 1028.107547] ? proc_fail_nth_write+0x97/0x220 [ 1028.107580] ? lock_acquire+0x15e/0x2f0 [ 1028.107607] ? __fget_files+0x34/0x3b0 [ 1028.107631] ? find_held_lock+0x2b/0x80 [ 1028.107653] ? __fget_files+0x203/0x3b0 [ 1028.107676] ? lock_release+0xc8/0x290 [ 1028.107710] ? __fget_files+0x20d/0x3b0 [ 1028.107745] __sys_sendmsg+0x150/0x200 [ 1028.107782] ? __pfx___sys_sendmsg+0x10/0x10 [ 1028.107841] ? __pfx_ksys_write+0x10/0x10 [ 1028.107879] do_syscall_64+0xbf/0x390 [ 1028.107907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.107930] RIP: 0033:0x7fb955114b19 [ 1028.107947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1028.107967] RSP: 002b:00007fb95268a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1028.107988] RAX: ffffffffffffffda RBX: 00007fb955227f60 RCX: 00007fb955114b19 [ 1028.108002] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1028.108015] RBP: 00007fb95268a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1028.108028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1028.108040] R13: 00007fff9244b21f R14: 00007fb95268a300 R15: 0000000000022000 [ 1028.108073] 12:00:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) (fail_nth: 8) 12:00:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:00:04 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x2043}}}, 0x7) 12:00:04 executing program 4: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:00:04 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x0, 0x100, 0x0, 0x0, 0x22, r2}) 12:00:04 executing program 0: getsockname(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000000)=0x80) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8f4, 0x3, &(0x7f0000001240)=[{&(0x7f0000000180)="fc966bd3abb98ec4af2647f7d82fb6d0", 0x10, 0x2a}, {&(0x7f00000001c0)="9f84b591fb1fff23904ec5d5f15d730627723ce3abbec3db277829b71bee10dc20a64030514341dca7c71ce334524d9fa81c2f9623a8eac63cb8b47e4b93fe911661d1de98fe0b4b5236410669497539e75fcc607be6b89ba510691a7fd61ac4ee86", 0x62, 0x9}, {&(0x7f0000000240)="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", 0x1000, 0x101}], 0x808, &(0x7f00000012c0)={[{@numtail}, {@uni_xlate}, {@rodir}], [{@appraise}, {@appraise}]}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="ef7dbc855981c124"], 0x102) r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) r2 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r3 = dup(r2) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001380)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) renameat(r3, &(0x7f0000001340)='./file0\x00', r4, &(0x7f00000013c0)='./file0\x00') io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000001300)={@local}, 0x14) 12:00:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 12:00:04 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x803, 0xa8, 0x3}, 0x18) getpeername$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) 12:00:04 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) 12:00:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:00:04 executing program 4: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) [ 1038.342283] Bluetooth: hci3: unexpected event for opcode 0x2043 12:00:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:00:04 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x22, r2}) 12:00:04 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9}}}, 0x7) 12:00:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) (fail_nth: 9) 12:00:04 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = signalfd4(r0, &(0x7f0000000080)={[0x10001]}, 0x8, 0x80000) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000"], 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8000000000000}}, './file0\x00'}) 12:00:04 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) [ 1038.432765] Bluetooth: hci3: unexpected event for opcode 0x0000 12:00:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 1038.525428] FAULT_INJECTION: forcing a failure. [ 1038.525428] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.527146] CPU: 1 UID: 0 PID: 16289 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1038.527175] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1038.527187] Call Trace: [ 1038.527194] [ 1038.527203] dump_stack_lvl+0xfa/0x120 [ 1038.527233] should_fail_ex+0x4d7/0x5e0 [ 1038.527263] should_failslab+0xc2/0x120 [ 1038.527292] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 1038.527329] ? __alloc_skb+0x2ab/0x370 [ 1038.527367] ? __alloc_skb+0x2ab/0x370 [ 1038.527394] __alloc_skb+0x2ab/0x370 [ 1038.527424] ? __pfx___alloc_skb+0x10/0x10 [ 1038.527456] ? genl_rcv_msg+0x532/0x7e0 [ 1038.527489] netlink_ack+0x167/0xbf0 [ 1038.527536] netlink_rcv_skb+0x344/0x430 [ 1038.527570] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1038.527595] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1038.527644] ? netlink_deliver_tap+0x1ae/0xce0 [ 1038.527682] genl_rcv+0x28/0x40 [ 1038.527701] netlink_unicast+0x5a7/0x870 [ 1038.527741] ? __pfx_netlink_unicast+0x10/0x10 [ 1038.527789] netlink_sendmsg+0x8a3/0xd80 [ 1038.527829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1038.527878] ____sys_sendmsg+0xa67/0xc20 [ 1038.527903] ? copy_msghdr_from_user+0xfb/0x150 [ 1038.527936] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1038.527971] ? lock_acquire+0x15e/0x2f0 [ 1038.528013] ___sys_sendmsg+0x10f/0x1b0 [ 1038.528047] ? __pfx____sys_sendmsg+0x10/0x10 [ 1038.528077] ? perf_trace_lock+0xb5/0x5d0 [ 1038.528113] ? __pfx_perf_trace_lock+0x10/0x10 [ 1038.528141] ? proc_fail_nth_write+0x97/0x220 [ 1038.528175] ? lock_acquire+0x15e/0x2f0 [ 1038.528203] ? __fget_files+0x34/0x3b0 [ 1038.528226] ? find_held_lock+0x2b/0x80 [ 1038.528248] ? __fget_files+0x203/0x3b0 [ 1038.528271] ? lock_release+0xc8/0x290 [ 1038.528305] ? __fget_files+0x20d/0x3b0 [ 1038.528340] __sys_sendmsg+0x150/0x200 [ 1038.528372] ? __pfx___sys_sendmsg+0x10/0x10 [ 1038.528416] ? __pfx_ksys_write+0x10/0x10 [ 1038.528453] do_syscall_64+0xbf/0x390 [ 1038.528482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.528517] RIP: 0033:0x7fb955114b19 [ 1038.528533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1038.528554] RSP: 002b:00007fb95268a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1038.528575] RAX: ffffffffffffffda RBX: 00007fb955227f60 RCX: 00007fb955114b19 [ 1038.528589] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1038.528602] RBP: 00007fb95268a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1038.528614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.528627] R13: 00007fff9244b21f R14: 00007fb95268a300 R15: 0000000000022000 [ 1038.528659] [ 1042.374951] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1042.376616] Bluetooth: hci3: Injecting HCI hardware error event [ 1042.378302] Bluetooth: hci3: hardware error 0x00 [ 1044.422198] Bluetooth: hci3: Opcode 0x0c03 failed: -110 12:00:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:00:13 executing program 4: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:00:13 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8}) 12:00:13 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9}}}, 0x7) 12:00:13 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="044f10297fb3cacfbbfd0a62663d51570817be5f9d3007bb20c58b7bee7995803c7e3ecb2840da79afc73a2d590e3b5be34064dd808e55a8d08f9bd71ec546a07421c4b6ab93a06132da74ddaeeae456d8f37caa6c89af14530e5e9fd9f6ed51b8d85fa06e353b495ee3284226ce465de0dedd44d06291ac5afe96f8fff60a657a4a97893ebf8db6f6279b4c9c5505ff28353112a128470c847289cbf49fc3e172ffaaa30ae516"], 0x102) 12:00:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:00:13 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh={0x87, 0x0, 0x4, 0x0, 0x0, 0x18}, 0x8) 12:00:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) (fail_nth: 10) 12:00:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 12:00:23 executing program 2: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9}}}, 0x7) 12:00:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 12:00:23 executing program 4: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:00:23 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8}) 12:00:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:00:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) (fail_nth: 11) 12:00:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'rose0\x00', {0x2, 0x0, @dev}}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f"], 0x102) 12:00:23 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8}) 12:00:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 12:00:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:00:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) (fail_nth: 12) 12:00:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:00:23 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f"], 0x102) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0x0, 0x2f}, "9590fc225edac673d18016af47cda46a76d2e9025e74487a99917a775323b3ff87c292671bffa645ceb2853dae9119"}, 0x33) 12:00:23 executing program 4: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x200) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:00:23 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:00:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:00:23 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x2043}}}, 0x7) 12:00:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:00:23 executing program 4: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:00:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:00:23 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x2043}}}, 0x7) 12:00:33 executing program 4: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup(r0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:00:33 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x102) 12:00:33 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x2043}}}, 0x7) 12:00:33 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:00:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:00:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) (fail_nth: 13) 12:00:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:00:33 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000", @ANYRESDEC=r0, @ANYRESDEC], 0xc4}, 0x1, 0x0, 0x0, 0x851}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r7, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008001}, 0x810) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r8, 0x10, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) splice(r1, &(0x7f0000000000)=0x3c, r0, &(0x7f0000000040)=0x3, 0x5, 0x2) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=ANY=[@ANYBLOB="0000fbff20000000"], 0x8) [ 1067.810698] FAULT_INJECTION: forcing a failure. [ 1067.810698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1067.812626] CPU: 1 UID: 0 PID: 16369 Comm: syz-executor.5 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1067.812658] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1067.812671] Call Trace: [ 1067.812679] [ 1067.812688] dump_stack_lvl+0xfa/0x120 [ 1067.812721] should_fail_ex+0x4d7/0x5e0 [ 1067.812755] _copy_to_user+0x32/0xd0 [ 1067.812786] simple_read_from_buffer+0xe0/0x180 [ 1067.812846] proc_fail_nth_read+0x18a/0x240 [ 1067.812880] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1067.812911] ? security_file_permission+0x22/0x90 [ 1067.812945] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1067.812976] vfs_read+0x1eb/0xc70 [ 1067.813017] ? __pfx_vfs_read+0x10/0x10 [ 1067.813046] ? lock_release+0xc8/0x290 [ 1067.813084] ? __fget_files+0x20d/0x3b0 [ 1067.813124] ksys_read+0x121/0x240 [ 1067.813150] ? __pfx_ksys_read+0x10/0x10 [ 1067.813189] do_syscall_64+0xbf/0x390 [ 1067.813220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1067.813244] RIP: 0033:0x7fb9550c769c [ 1067.813263] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1067.813284] RSP: 002b:00007fb95268a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1067.813307] RAX: ffffffffffffffda RBX: 000000000000002c RCX: 00007fb9550c769c [ 1067.813322] RDX: 000000000000000f RSI: 00007fb95268a1e0 RDI: 0000000000000005 [ 1067.813336] RBP: 00007fb95268a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1067.813350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1067.813363] R13: 00007fff9244b21f R14: 00007fb95268a300 R15: 0000000000022000 [ 1067.813398] 12:00:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x28040, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f"], 0x102) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x800, 0x1ff, 0x1}) ftruncate(r1, 0x4) 12:00:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:00:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:00:34 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:00:34 executing program 6: 12:00:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:00:34 executing program 4: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) dup(r0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:00:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:00:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r1, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3c}}}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x148c4}, 0x4040001) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f"], 0x102) 12:00:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:00:44 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8}) 12:00:44 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:00:44 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @private0, 0x200}, 0x1c) 12:00:44 executing program 6: 12:00:44 executing program 4: syz_io_uring_setup(0x2260, &(0x7f0000003a00)={0x0, 0x0, 0x0, 0x0, 0x20000}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:00:44 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8}) 12:00:44 executing program 6: 12:00:44 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = dup(r1) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1604000000000000000100072000000002ee4c210107000000f2000000040000000000bf9af6cc2245668dd972d9e18c372e6c1596503d56e37c8ca57b13380175db2979c2eb633c0b5aec97cc41b6a7f14bdbc27743acf60854fec8e354c1be20cc106a1c8677316779e57db154de5d255d1cda8b5bed2f78f21675313498ecc22058d9f1190e4088a6eab9870a9cc190ac10544313a7249e5a40dccea6ffa75c747d46e93644b4"], 0x30) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000000)) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) 12:00:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:00:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:00:44 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:00:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x200000, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1ff}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x40010) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x102) 12:00:44 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8}) 12:00:44 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x0, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:00:53 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r1}) 12:00:53 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="fe96180000000000"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000400000200f4fe11c8a606d0eea37fe821d900"], 0x8) 12:00:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:00:53 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:00:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:00:53 executing program 6: syz_emit_vhci(0x0, 0x0) 12:00:53 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x102) 12:00:53 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x0, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:00:53 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000240)=ANY=[@ANYBLOB="000604030000000000000000000000000000ffffac1e010100000000000000000000ffffac1e0101fc020000000000000000000000000000d3102947c5c9dff4709205e2291783efab01826cba250a52d0bfbdc202d8ec6929e67d947849edecd57948a2deed78bca8f573b450fd60"], 0x38) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xffffffffffff9ee9, 0x8000) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r0, 0x20}, {r1, 0x200}, {r0, 0x200}, {r0}, {r2, 0x400}], 0x5, &(0x7f00000001c0)={r3, r4+10000000}, &(0x7f0000000200)={[0x1]}, 0x8) 12:00:53 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f"], 0x102) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x8f}, "955e9ecd022904ef09809f58a6b26a10f55377a3e6d8b69fdce447fe3c33ef9d42c7c00ec868633f2f1a9b98fd8654b9293f9524883576421c24b75b33a926028a9f197ac201fcebfabb15338b0bc15a36a1d26abb15c045b90853b5783e8ef449114bf532db98db505b52642173f6c97c5d8c371d7ccdbdf9cb80fed30eb923ab8fa1abd8a1bd4bb1ea96dddaf73a"}}, 0x92) 12:00:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:00:53 executing program 6: syz_emit_vhci(0x0, 0x0) 12:00:53 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:00:53 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r1}) 12:00:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:00:53 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x0, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:03 executing program 6: syz_emit_vhci(0x0, 0x0) 12:01:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:03 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r2, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) shutdown(r1, 0x0) 12:01:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:01:03 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:01:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:03 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r1}) 12:01:03 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:01:03 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) 12:01:03 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) close_range(r0, r0, 0x2) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) 12:01:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x0, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:03 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r1}) 12:01:03 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:01:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:01:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x0, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 1101.446076] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1101.447110] Bluetooth: hci5: Injecting HCI hardware error event [ 1101.448361] Bluetooth: hci5: hardware error 0x00 [ 1103.494082] Bluetooth: hci5: Opcode 0x0c03 failed: -110 12:01:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:12 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:01:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x0, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:12 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}}}, 0x7) 12:01:12 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r1}) 12:01:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x7, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:01:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r7, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r9, @ANYBLOB="000025bd7000fcdbdf2508000000140001800e0001006574683a7866726d300000005c000480140007800800030000feffff08000200020000000900010073797a30000000002400078008000400c000000008000400040000000800040008000000080003000200000014000780080204000200000008000200010000004000078008000100040000000c0003003f001b00000000000c000400050000000000000008000200070000000c000400332c0000000000000800020004000000"], 0xc4}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r9, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x18}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffff272}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}]}]}, 0x58}}, 0x8000) chown(&(0x7f00000009c0)='./file0\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000640)=@kern={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)=[{&(0x7f0000000680)={0x118, 0x2c, 0x2, 0x70bd27, 0x25dfdbfb, "", [@typed={0x8, 0x58, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xff, 0x93, 0x0, 0x1, [@typed={0x14, 0x35, 0x0, 0x0, @ipv6=@mcast2}, @generic="11489c53da09996f0a754e25529bfc5c5a5f5ba7c5f52de31b86a9f37250aa5d17df53f686e079fe22bc1d2fc167307ca720723631a928c6e2822317fd8b4fe34b611c6ac623463a33a0444b6dd7705cc8f92de580fc708ff26fe4be017b9c3296d082bb81bec465b8d1877971b3a797ca239dd8d512edd792fc0b661c72b8e8236065f23558a7c3a293cde51cf00647f83538ef407ce83b", @typed={0x8, 0x46, 0x0, 0x0, @uid=0xee01}, @generic="e7ad0f721b4608dd031fbc6d09d9f8c77f26e2108945a60017fe958fabab052fcbe24931d2e13c9ca5ede71b18216d3540884c5980d749e1aa420513b5762343665e53259c4ae4"]}]}, 0x118}, {&(0x7f00000007c0)={0x458, 0x16, 0x2, 0x70bd28, 0x25dfdbfb, "", [@typed={0x8, 0x22, 0x0, 0x0, @uid}, @generic="7a3f0be88b4a258babc02e76c5d6fc79e71da96eff0dfce6bd858feaaac099036ae8e609f90a53045cf51063cb57df85ee15daa0d521a9c1c95623ef578300e858bfec02453458a2baeb9fcd03b044e8d2a75384d201a8b80cc368df0b68b4aaaf0dcd3ec17f14dda46b9f98432a2bb2304df154bee8ccb03a3dd488a699435b65b27cc3a1cad416771446d28d22b772be0e13ac1c0f23d2b7df65af22bcde0ddfa742ec0496f3ade36d94728e", @nested={0x2bf, 0x8c, 0x0, 0x1, [@generic="13d6fe55bc592c5e2becf1f824f5fe73b41d628495b0826e2e5a4e89592fb7fda8fcdd05021669f952e323c0d8c11c22bae32c884f68e7980df7ea5323437c98abf4d4b893dcefa5bfa4cf72ec3a164e617d121185d4698a178ca60fcf6415a63f4f82cd5e0fcffc4facbf38ed0e56cd1fbf2c7387c78aa5a18746bc279ab9e3beeb158fdd8e2c48dbed771781b3310411ab2acb1c9436efad0a2171b82c233147a3ee0fcce96e0f7dd6f707cd4a9b9cec144fe8ff035f5e85091268f6f360b759207013fc4951e4e4a6ac7b6906ab19b721ed791e13362834f0c88a6acf5c61fc021a14b02f87cc0aeff423938bc18d0129a3af604cefe8f0fa2662", @generic="a84be182713370c7ebd1b3f41859b043a97f8c896f7dd63e887dbd0d8455bd8a6e6229784ff9960b7e44bd35b8ec2293f0184d22de086b49dc0c4b043c8ed4a7814ee32424d8430f9bfae7f8f72bfd1a0ac743e65e82a47da3c941a0f56960ebd8b0e4cef5ab52249a13fbd140b80589f8160754c8878091453b3dc89171a90150", @typed={0x4, 0x9}, @typed={0x8, 0x23, 0x0, 0x0, @u32=0x4}, @typed={0x68, 0x59, 0x0, 0x0, @binary="ec52a70c79ea89b307177d7ce3f4ed8bd02a8797d5e9ec6aeb45677e13656d52e9711b25774f99ea5f2b84bac8563d335cce080ea4ed6277d2232a7924212d25bbfc2fffb35efc83d6da51dcf09ddc9f4e2a6c0d92575a1059bc26b27a3b40a08020418e"}, @generic="3f909bc1c994ed17312626cdcbe288ba4b1e88e19bcdd1d040f04b2fc2b8a41f2a60cc598aa401f8a03b0a01ece8128bc911e2f7e971413cf4dd65a52e4fcd729618d12cfa2ef92ee0c699a3b7ae03a88fba39c5eb68d39ff6136864a52dc152f461852a6f700232f4f40c57def179e3295efda1528dcbbb34e2e356ad57b8ec541b10ddffc1d340b3f1a91b645dc0280810acacca3167a86205b79bc1e221ebcd7f4824ac130b2ba22adad8fa59af57c43cb5d1024458f0", @generic="5cb1770f8dcdad3a3b00", @typed={0x8, 0x6f, 0x0, 0x0, @u32=0x8}]}, @nested={0xd0, 0x1e, 0x0, 0x1, [@typed={0x14, 0x32, 0x0, 0x0, @ipv6=@mcast1}, @generic="48e3bee7773c3a3fbcf5925bba6edfc5381b702ea158da41b1a208f67548a35fec0c05c874aea5391fa045e1020bbdaa14a9f3b1f82fced35b04fc5e4984af0f1f8460e44c31032143eb6b4ddbd00386ef74de0c6b1a8c1e764e9916f53b9e268b302adc3dd879bb6a351679f63780659d3f8f8375d636c96e6262fab1ac05102a1a714c02601b7f17d315c228cd862f2d9b8c75fa0f1a9f5906bb99bcf2b2d44d133bdb1acc9a839a4f2bc0e1018969", @typed={0x8, 0x7a, 0x0, 0x0, @u32=0x3ff}]}]}, 0x458}], 0x2, &(0x7f0000000f00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x98, 0x8011}, 0x4) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000c80)={0x184, r1, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x1f}}}}, [@NL80211_ATTR_BSS_SELECT={0x3c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0x6}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x8, 0x2}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x6, 0x8}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0x5}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xff}]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x8070080, {0x5, 0x200, 0x0, 0x2}}}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x10, 0x1, 0x1, 0x0, {0x100000000, 0x134c, 0x0, 0x4, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x1, 0xd023, 0x4}}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xd1, 0xfc, "3bdb63734600edf0a28ecd55133448df536a04a6e11bf4ac7a7e6d165529c66008d45c71359cc09e529c274dc0238c0075f9bf9373278c7f888e007a5670fa2b62dc0ac417e57bc04f860a829107f71e5ccc0a6be21a92c247c9b243487b8c568f160db8034adbed35db1d684595997b097c4ea345e45e5e3caab153e7b6da0ad3463a331f4febe8cc0128cb215cced44ae5884e7f4ae9415215143dd15ca1421e08717afc7dc5df77ddfcfdd2a5a3bc3c58f1106cac1d9534a335065f200a1d85afb3e2c6b2cae7209ef3d30f"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "02c4f530a1847606c7d49fda25e19a87"}], @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x184}, 0x1, 0x0, 0x0, 0x400080c}, 0x4000) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x68, r1, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x800, 0x36}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x24}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0xb}}]}, 0x68}, 0x1, 0x0, 0x0, 0x48080}, 0x20000080) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="042f10297f", @ANYRESOCT=r0], 0x102) 12:01:12 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)={0x8, 0xc, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @pad1, @generic={0x9, 0x25, "d88ac885db0c40504e1c4e90908c0481fd1b23f14b3a13aa96adf1a2b1da14e9e026b5170f"}, @ra={0x5, 0x2, 0xef}, @hao={0xc9, 0x10, @mcast1}, @generic={0x9, 0xd, "df76a3b2e007eb28b8af25bbc0"}, @pad1]}, 0x68) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000080)=0x2, 0x4) 12:01:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:12 executing program 3: sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa000400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x3, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x16000000}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) 12:01:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:01:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:12 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r1}) 12:01:12 executing program 4: perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:01:12 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}}}, 0x7) 12:01:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:01:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:22 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:01:22 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@hopopts={0x1d, 0x1f, '\x00', [@pad1, @generic={0x3, 0xd6, "fad86214fad43937c195b4b00f6a87e05d4c8b75f9c9bbb01a0f5a4941ddf3cd36922510d0077a2ca30c9b2e65a488d81bcaf1971535cd4b8d6fdce0518e886c47822688ed47f3e4dbb0f2ac9f2178431edf39e2e102318b5a433e533646e89652d944a5660d5de3bb5c8e389e1289a92aa2cd69451a53f42dbda0cbf0a464333583722cfeaafaad25c84c19564ae99df29abe53cfbc713679cf12dc7a5392fdb7d544f17842e03be3e8881cc2813a99040c0e3f5547dde83734740b584c5f96dc082086db2ab031a366270f7fde368bbb0b9607f956"}, @ra={0x5, 0x2, 0x80}, @calipso={0x7, 0x18, {0x3, 0x4, 0x63, 0x8000, [0x400, 0x80000000]}}]}, 0x108) 12:01:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:22 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}}}, 0x7) 12:01:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:01:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:22 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r1}) 12:01:22 executing program 0: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = dup(r1) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) r3 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r4 = dup(r3) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) r5 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r6 = dup(r5) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r6}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xe4}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0x800) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f"], 0x102) 12:01:22 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_io_uring_complete(0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000000)={0xc4, 0x200000000000022a, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0x6}}, @padn={0x1, 0x1, [0x0]}]}, 0x50) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x8) 12:01:22 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:01:22 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r1}) 12:01:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:32 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) 12:01:32 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10a179"], 0x102) 12:01:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r1}) 12:01:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x14, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:01:32 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:01:32 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:01:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8}) 12:01:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:32 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) r1 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r2 = dup(r1) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) getsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000000)=""/197, &(0x7f0000000100)=0xc5) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) 12:01:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xcc, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x400}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 12:01:32 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:01:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xef, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:01:32 executing program 6: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)=0x0) r2 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) r3 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r4 = dup(r3) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x40010, r2, 0x8000000) r6 = dup(0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r6, 0x0) r7 = signalfd4(r6, &(0x7f0000000080)={[0x8]}, 0x8, 0x0) r8 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x14, 0x0, r9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_STATX={0x15, 0x5, 0x0, r7, &(0x7f0000000440), &(0x7f0000000340)='./file1\x00', 0x8, 0x6000, 0x1, {0x0, r9}}, 0xa50) syz_io_uring_submit(r5, r1, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x80000000, 0x2, 0x1, {0x0, r9}}, 0x4bb7) pidfd_send_signal(r2, 0x2c, &(0x7f0000000080)={0x34, 0x3, 0x4}, 0x0) shmat(0x0, &(0x7f0000001000/0x4000)=nil, 0x2000) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) 12:01:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:32 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x200) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)={0x62, 0x24, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x6, 0xa4, "4bf82bcb6bc0983e709a6cef75c184c8f11d6b818dc87dd5edf215a68913acdc965ac8e20746857b9efb76c15cdf13e15714e987f1f3984d6ff97d89a115330f469f9e0a4547ac2e0ef083bef0ca9c726b02388ae37a9d321d54e054dd8c66960fa44bf83a6a7c5a623cdd37aa0b22a7919e6691bca0e39573c61b9fdea0d5593be522322e47f67a36ccf001d7315c672211ce9c923d2371beb81b35133362ad34616a0b"}, @generic={0xd5, 0x60, "1ba4473e4402c09316111466ba00a612c66b13155d185742bd51abfc43996a6e617d90d3d10000b7b02029f6b7d7f4a6f015e7b77ef248740a02531c2924f4ad7f90838cc43cbf2ace16c45be1929ab1ddf2e218b328a29b2887dd236c3aab92"}, @generic]}, 0x130) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) 12:01:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8}) 12:01:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:42 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:01:42 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000400000000000bc7b9963b1b0c0b16750d2eb0bb"], 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r2, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) dup2(r1, r0) 12:01:42 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:01:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:42 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8}) 12:01:42 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x410440, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) 12:01:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r3, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syzkaller0\x00', 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x102) 12:01:42 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r1}) 12:01:42 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:01:42 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000001b00)=""/238, &(0x7f00000032c0)=0xee) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003cc0)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000080)=""/157, 0x9d}, {&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/169, 0xa9}, {&(0x7f0000000240)=""/255, 0xff}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x5, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000000480), 0x6e, &(0x7f0000001640)=[{&(0x7f0000001540)=""/248, 0xf8}], 0x1, &(0x7f0000001680)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x168}}, {{&(0x7f0000001800), 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001880)=""/101, 0x65}, {&(0x7f0000001900)=""/240, 0xf0}, {&(0x7f0000001a00)=""/118, 0x76}, {&(0x7f0000001a80)=""/115, 0x73}, {&(0x7f0000003f40)=""/231, 0xe7}, {&(0x7f0000001c00)=""/21, 0x15}], 0x6, &(0x7f0000001cc0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001d80)=""/43, 0x2b}, {&(0x7f0000001dc0)=""/143, 0x8f}, {&(0x7f0000001e80)=""/221, 0xdd}], 0x3}}, {{&(0x7f0000001fc0)=@abs, 0x6e, &(0x7f0000002140)=[{&(0x7f0000002040)=""/44, 0x2c}, {&(0x7f0000002080)=""/96, 0x60}, {&(0x7f0000002100)=""/37, 0x25}], 0x3, &(0x7f0000002180)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000002240), 0x6e, &(0x7f0000003340)=[{&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)}, {&(0x7f0000003300)=""/41, 0x29}], 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="0001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x50}}, {{&(0x7f0000003400)=@abs, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003480)=""/234, 0xea}, {&(0x7f0000003580)=""/35, 0x23}, {&(0x7f00000035c0)=""/126, 0x7e}, {&(0x7f0000003640)=""/78, 0x4e}, {&(0x7f00000036c0)=""/189, 0xbd}, {&(0x7f0000003780)=""/143, 0x8f}, {&(0x7f0000003840)=""/211, 0xd3}, {&(0x7f0000003940)=""/147, 0x93}], 0x8, &(0x7f0000003a80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000003ac0)=@abs, 0x6e, &(0x7f0000003bc0)=[{&(0x7f0000003b40)=""/107, 0x6b}], 0x1, &(0x7f0000003c00)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}], 0x8, 0x102, &(0x7f0000003ec0)={0x0, 0x989680}) fallocate(r2, 0x1, 0x9, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000003f00)={@private0, 0x5}) 12:01:42 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:42 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r1}) 12:01:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:01:42 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x102) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 12:01:42 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r1}) 12:01:42 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) dup2(r0, r0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="080026ef5c0bec0838044800a80900000800270004000000000000000000"], 0x2c}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES64=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',dfltqid=', @ANYRESHEX=0xee01, @ANYBLOB=',aname=}%!$,cache=loose,access=user,cache=mmap,afid=0x0000000000000400,privport,measure,fowner=', @ANYRESDEC=0xee01, @ANYBLOB=',fsuuid=14dza86c-0bdf-dd8a-489X-a81e9bfd,defcontext=staff_u,obj_role=\x00,obj_user=\x00,obj_role=\x00,euid=', @ANYBLOB="cf6bfe82596be512e62cab30da052dfbfb478923ee0935db934de60771ba5c9ff9bbecae33f23015b5db451d4439a13bb0e83b29371c1bc4aff5d3aa012509113471543b8a7ea7069e32d08d0514d6611410048b99041022263152a59bd81db5dc063efb7a040b61672aca42bdf1cd0641b75598d7915d560025ff1c6da08a54657aab49957de1c1643f85b4857c5c5bbecc193e497d6b4b169b21a3e5e0513a8301afe027d9408748fdf3a4120c5e1cabc6c57935c8cae89245e5d6b846681868c3a277b26f48d7cfd872", @ANYBLOB=',seclabel,\x00']) r4 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r5 = dup(r4) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x40, r7, 0x5, 0x0, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x58}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x40}}, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000140)={{}, 0x7, 0x0, 0xfffffffffffffffc}) write$binfmt_misc(r6, &(0x7f0000000840)={'syz1', "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"}, 0x182) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) ioctl$RTC_EPOCH_SET(r5, 0x4008700e, 0x2) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=@routing={0x89, 0x4, 0x3, 0x1, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1]}, 0x28) 12:01:42 executing program 6: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c8e021001d000100118102009a0500000004000700e600ee1e7816709c4e8a0b3b30375360246bc1a8d8de0dbe953f7de8ede3b402d6ec2d0fcef8712ee38fbc1c578bc94338c2f1fdf2176a6c2772ceb4d1ce6093d7835830b79e8661a1f82ec151a1135af7e10a2aac77efa13cedf8354d2c84b183d7dd073a443f8d2117c53c989fe40c7ae52595bc0995847b18522215322a8e3d7bfa1099089c0509f7901688465f89e3e66bdb15869e22e4c8fe9f06524cb80a17bba58993dd5a1df5758d148777432be907d94205c827e465367b516973362092bcdf404d101846cc4e"], 0x26) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c8900c00080005000796040403000000b5ae146547e9d9dcd3307689ba61b7fb4f8da612684f35fa87fca78d24ea6ff3944bbdb94eadce41c4e7211913c5f90cba2de2f809dbf16b05f9435deec0"], 0x11) 12:01:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 1136.375853] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1136.401247] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 12:01:52 executing program 6: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) 12:01:52 executing program 0: prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f"], 0x102) 12:01:52 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:01:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3e7, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:01:52 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) 12:01:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:01:52 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=ANY=[@ANYBLOB="0000c30b00000000"], 0x8) 12:02:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:02:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:02:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:02:03 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 12:02:03 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) 12:02:03 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:02:03 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) 12:02:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r7, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r10, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESHEX=r5, @ANYRES64=r6, @ANYRES64=r2, @ANYRESDEC=r5, @ANYRES32=r13, @ANYRESDEC=r0, @ANYRES32=r6], 0xffffffffffffff17) 12:02:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x600, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:02:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:02:03 executing program 6: newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg(r1, &(0x7f0000000440)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x2, {0xa, 0x4e24, 0x7, @mcast1, 0xff}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="517d5e0c707ab7e381a1dc6bdccb022af8ed25cb421636960d275ff37a877b7121130546007359d034c83f0a8b80d8ea973334923ed2d4775be1bc462f7c0743a79026275f049680919c022abbcdb11679072c88cd2f989f885ac281e4fc162cf8ef2f62eff98a59d2e43f330cc85a758235fcfa409718ce1a1643b5cdd5bb13bec7376eb54451b6ff3cd9b418b4f11d4fc1f030c7587034599ca6ce9b3fe33523bbd2065476f7f3b1b08bc2e92ccff2e33a5165ba5ed6", 0xb7}, {&(0x7f0000000340)="881fe8ae2c1cff1861bc68cd1c2676628cd465980000d554819061dd3e461d36932344b18b18dd515b68e63cf2a8606a30761eddc7949dcab8bce8f295322117bb83d54362c1d8e70a441868c4bf17adcc6ba338f111e9105126c3d4d0f0516cccda57f040f4c910c755", 0x6a}, {&(0x7f00000003c0)="ccdf29fb439db6f72d0b5c7561bb2016139443c88632bc98c5480c7636f1c34fb4925689c88d07e32046ee8936e460f2f747ca59d1502b9301551a7f3e9d7679", 0x40}], 0x3, &(0x7f0000000a00)=[{0x28, 0x85, 0x2, "cfa779da2ad8d45f82d411f766b6e2caa3fd75d1"}, {0xa0, 0xc, 0x400, "b3b49d09343320ad83b109862f65614dc4fc9287445e703143d3adfdd4c0c8298127adfadb318a06cf05ceb6e1b3c4d37f5ee42ca337362abdec10356d77eea4fa1e7f20aef0e47941714733b0c95fa1632f7e4bc3340f92c819bb21c369e8d2674bc7db735bd61858c4336dd61c65f9624279dd8ee4fc1b098e019e41fb3abb121659f94f52e5c8ed16"}, {0x40, 0x101, 0xf6, "3bc4c495364def491c498a8eb819a93313a57a983ad7e0571dbfa70e6b3450556e60be359da5fbfab09c"}, {0x1010, 0x113, 0xf128, "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"}, {0x108, 0x119, 0xfffffc00, "dc52989ce0dc05a49416bbaa1f4780bc2577c9dff8423b5703b833030af7ea5f789ab70240d6734833b810f2619f808761c64d5a141681d31ee3f24b0fa31bb478f881d1d5307f83250000865dbeaa41e7c07cf6da03666760e119d9426806c761374f32a9f4932106bfa244e235981338ebf19a50132ab3af3106c2c837803e9f81161500fd3860a1bd18206782c94f761cf5ea3a0f6535e5e6cfd8965b8cb55f507c0fe62a925d8784acacc5f22408e991c2ae41c9144a4c1de7643ba009d06a5e9f1d5b390850d00f39724e9f3d96541f528f42ab6c2dcd56477c29e079b7e6b8b26c292ca0711afa3840894b1f6af9f500"}, {0x10, 0x119, 0x1}], 0x1230}, 0x20000850) chown(&(0x7f00000009c0)='./file0\x00', r0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) chown(&(0x7f00000009c0)='./file0\x00', r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [{0x8, 0x0, r3}]}, 0x2c, 0x0) chown(&(0x7f0000000140)='./file0\x00', r2, r3) mount$9p_tcp(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x34885, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d7463702c010072743d307830303030303030303030303034dd6532322c616373733d1459d9a4fbc1351ecc8066a1947897bf3414fa4f59787328bb7cbfd17157b3e017d7f6aa052b63ea337e961ea1224ec0300a560e6c427a8fa4ffe64923c1d36a3db8b1b87b32abacac8c1a17c558f317bc0f4bb93034fd4a286f0455c812c9", @ANYRESDEC=r0, @ANYBLOB="2c667363616368652c6e6f657874656e642c6163636573733d636c69656e742c76657273696f6e3d3970323030302e752c7375626a5f747970653d2c6673757569643d32663066396230342d616666622d613665612d403737622d3861660e346632052c61707072616973652c61707072616973652c00"]) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x2, 0x4}, {0x7ff, 0x4}}}}, 0x11) 12:02:03 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:02:03 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) 12:02:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:02:03 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x8) 12:02:03 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x0) 12:02:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:02:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:02:03 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440)={0x16}, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) 12:02:03 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x0) 12:02:03 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 12:02:12 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 12:02:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:02:12 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x878abc8ae4ba869d}, {0x0, 0x0, 0x2043}}}, 0x7) 12:02:12 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000500)=@srh, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2, 0x5}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @multicast}, 0x10) r6 = dup(r2) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f00000002c0)={0x87, 0x22, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x80, 0x100, [0x6, 0xaf2, 0x3, 0x81, 0x3, 0x175735c2, 0xfffffffffffffffc, 0x6d2]}}, @pad1, @generic={0x5, 0xad, "41a01c1fb2d890e04be3dd9ad15ff73bc017af320fc3937edadcba9f37cb1271a946a4ee2989b88a644c971b5f2f1fe6d6e9013985f46d94c2464275f0975c574950b3bd77eabfa157b37e67eb224c92755bcd12a7eb7ac046e21830203e1520e7ed5b411b29a50283b27c11bf61927dfe6b77bc1a30a6061dfe7e57105a0352137506b256899b6714441f0c9a110e15483b83819bbf5506b618a254dda80ef7bfad6114f4401e6e594bc4d8e7"}, @pad1, @hao={0xc9, 0x10, @mcast2}]}, 0x120) 12:02:12 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x0) 12:02:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:02:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x8}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x7f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x614}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x24044084) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30000}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x3c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0200173c563fbce8bb935f275e7ab1dd2f29bd7000fddbdf25010000000c00040009000000000000000c0004008e000000000000000c0008950000000c2002007f0000000000000008000100000000000c00"], 0x58}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES64], 0x102) 12:02:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:02:12 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000540)) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x80001, 0x101) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@mcast1, 0x0}, &(0x7f0000000100)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f0000000240)=0xe8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r9, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1d0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x50}, 0x2000c004) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) 12:02:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:02:12 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 12:02:13 executing program 3: listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/191, 0xbf) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/26, 0x1a}, {&(0x7f0000000240)=""/31, 0x1f}], 0x2, &(0x7f00000002c0)=""/95, 0x5f}, 0x3f}], 0x1, 0x20, &(0x7f0000000380)={0x0, 0x989680}) sendmsg(r1, &(0x7f00000004c0)={&(0x7f00000003c0)=@vsock={0x28, 0x0, 0x2711, @my=0x1}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000440)="677d652c88972df42c03c96c448f80a4a3a4302a48404e0a98c565b37cbb2447c298e802ca6e32387dc3e100b7e028b74b7b380ea5f00d051255", 0x3a}, {&(0x7f0000000540)="c7edd56ccc9408cb65f9f0d4b89bad99e8fa84124ba264b98ff3b69a3d145ece89fe5df90d63e437d5ba59e7b5321cdabe48c3eaa84b86915f53e3df55c3ccd7a3cf8602c84fada366a7a3d33f7f71624b0fafcafe67c312c3ac8827c9b0f8d1da259861ee61ccc6821cd7ff2c9a2342c08952299b40d776014d8fe8ee42817823a9", 0x82}, {&(0x7f0000000600)="4684f1fca8a276d5489d4f99f27c25c44a5c7d3a6d3cc8c60744d97b00f97bcbd6e4a4c228aa66ddfdba73bb799b926128d55a9919cee936bbcfd5eeadb531b2bfaaa6d3718be5e6b3035779b0af11517f9fb27c05c2b773463e5cdcebd7edf457eda133fff0624c43cc9f9e08b6bd1e65fbaab6e9f27e5fdc1121f5f5489e38d67a29ce960f89c4d2ae11e45a6bd4d843", 0x91}], 0x3, &(0x7f00000006c0)=[{0x98, 0x3a, 0x3ff, "5255bb432b5bcbde5d21f8df9814a63490e47ff62bc00f005887fa82cd408298095f7bd27ec13d2a199cb4f15947585df374b15a8b5447c7645edc5d30aad56a3134a45f7528b83ae719621bc9b857baac2f8268325b9c354a39a644392e6881e420f08993f136ec8b693ea3d8d42d98df92113432019db5d8778e2a5d5b810293ad773621df279c"}, {0x1010, 0x117, 0x10000, "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"}, {0x40, 0xff, 0x1f, "4900723790e7566b3321846401368566ef65d69815e51dd12714894739ac793c3c5c3955a5c47cbddbb8e6d85f07f982"}, {0x80, 0xf50fece95151cc62, 0x10001, "e55bc6d3946234b083118e8405577422bc327a26837817447725c67ce9e22408f131961811e7afb2c286c3f679daba65ca288feb817086f098e50c47dfecd8199629627e5ee659d7d24aec8c63ad2b9b664330188ae0d72a56e4486e6f1eda655c06666ba2ae2e21a077debcd0"}, {0xc8, 0x114, 0x7, "8a239270dd7aeb6b54b5fb8799729aba79ed465174ec3d1163d4b557ec49486b40f67bbacfa75667b7d9bde5c1ba6629927a336334f81ff35a3fb8e6d0e96669f5876fff9458eab9384d82923dbbaba96a2ffacac677901751c1edd2b0a37fa0f5c6ce3da3e7917fda080c916190db628b75abc5f6dee912c879f3bac63a37fee555d72645478186c80768f2f5529c8b1b577e75d145e4b04bc6d5ecef9b1173b28c67784eabb2f38fbb6f01ab7d481d5145317410"}, {0x18, 0x10d, 0x800, "caa528721f7825e9"}, {0x110, 0x115, 0xffffc316, "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"}, {0x18, 0x10d, 0x6, "e209f8f4"}, {0x40, 0x114, 0xe3, "d4b7cedcf46abbced07f1ac529456a4f361949f76906ef9e92d006a26102aa2e7acb036bb64c7554a0167472"}], 0x13b0}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x0, 0xd, '\x00', [@calipso={0x7, 0x20, {0x0, 0x6, 0x3, 0x200, [0x4, 0xe9e, 0x1000]}}, @enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x30, {0x2, 0xe, 0x6, 0x9, [0x70000, 0x3, 0xfffffffffffffffb, 0xfffffffffffffffc, 0x3fa, 0xffffffffffffffff, 0x8]}}, @pad1]}, 0x78) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) 12:02:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:02:13 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f"], 0x102) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x81, 0x2}, {0x2}}}}, 0x4b) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="03c80075eba0467358038ced8a2b0b6e0e028a1e4ee3e389eeed7fc9e7883b06efdbb3de808920fcc734ba2777a58e189b52dba1fee2ea5f176b13b21b68209cb93d01454f4d212e34b03d41d13f9ae545ea8a87a28ffaf07db457436d059b5bce7615cdcff46344831149734770ae846699983d19e0b7bff8d8d5aa3b02c01e71fe7ccaa2ee5e5651046c03b30f75fd3f075cf9d6fd939de3ad756dde8c8bb95d4c86658f921b8502dea05fdca0e11d00"/186], 0x79) syz_emit_vhci(&(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 12:02:13 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:02:13 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 12:02:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:02:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:02:23 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0x36}, {0xff, "357bdf19b9754cb36c6e02c16f523944a19dc99c715729eebcfc7a11a03a28fd779031299d078c17674d0207359a7bf00eb48926"}}}, 0x39) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0x0, 0xb8}, "edc3d44a620b5117cc1cfd4d2ee5d4dac5bd6494ca4cde78467ce41ba48083e0c2bb00263e837d43fce5e2c293a24e7fbbdb9dea9e583655c1ed2c39a1f0aaa397b7e6727105cd6cea7eb36f66c487a2254d4fd6e718f91b1fc93f562b7a82dc7cf700a0628b4f56e9874079d669e01db673b93994a6f76dfe3a4d1a98a28d342a6c1687089303bdf97fa12c71a2ee77462b16162e8750b4b8994d8857e62a973500b5f6183b40cdf49de65fad0e42b9e837e44ef6818de1"}, 0xbc) 12:02:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:02:23 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 12:02:23 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="33ad8000dfb52dd6a42615cdaebca183bcd7c684417c2c3a870f8ac2b29dd1eeab8ed952eb98469e070592f934f09005036182a0b487b20ce46484354264cd34da6895dd15d747ce5fae1397ac1dc8ebbaca84d7220a232a5a75f1a51d80cf9c93176a74601312d4a12fced6049cd9914b7a8017a57501a61960b9d98543fd6e93612c212d2f4a55cb88b788727330bb3a98d4d3"], 0x8) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000500)=@srh, 0x8) 12:02:23 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8}) 12:02:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x1400, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:02:23 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f"], 0x102) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_rsp={{0x18, 0x0, 0x18}, {0x2, 0xff00, 0x3, 0x2, [0x7, 0x200, 0x68, 0x101, 0x7, 0x1ffc, 0x7fff, 0x2]}}}}, 0x25) 12:02:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:02:23 executing program 3: openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000440), 0x8) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000500)=@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x6c}, 0x8) 12:02:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x5, 0x1, 0x8}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) 12:02:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:02:23 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8}) 12:02:23 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000540)) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x80001, 0x101) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@mcast1, 0x0}, &(0x7f0000000100)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f0000000240)=0xe8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r9, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1d0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x50}, 0x2000c004) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) 12:02:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xe703, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:02:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 1181.510161] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 1181.511607] Bluetooth: hci7: Injecting HCI hardware error event [ 1181.513604] Bluetooth: hci7: hardware error 0x00 [ 1183.558155] Bluetooth: hci7: Opcode 0x0c03 failed: -110 12:02:33 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="022f10297f"], 0x102) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xa1}, "ca3e50434683604e3c57bdf3ecc7fed6561b7bc3e8d181021cd8a5d818cb7acbe0aa15be6453c18ee293366119deb035367b54ee38dbf73955468d36c6da31d53bb4288c0fe33e95bb0bd9f0dbdfd0d43496894196a0c8b852dfb5bf5ce9d36f16c7bb2b11de6e36fd5546b9682e7643e8fdc7b8d1c6c661394aaa2ae254ea82ec64f436f358cc33a255674d41daa367154bd95e7870a3c88496d06a8efae21341"}, 0xa5) 12:02:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:02:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xef00, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:02:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:02:33 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8}) 12:02:33 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000540)) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x80001, 0x101) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@mcast1, 0x0}, &(0x7f0000000100)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f0000000240)=0xe8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r8, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r9, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1d0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x50}, 0x2000c004) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) 12:02:33 executing program 6: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0400004309"], 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x3}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x80, 0xc8, 0xf6, 0x6, "1b3ebe87aa03dd96"}}}, 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0x14}, @l2cap_cid_le_signaling={{0x10}, @l2cap_ecred_conn_req={{0x17, 0x5, 0xc}, {0x8, 0x9, 0x1f, 0x100, [0x9, 0x400]}}}}, 0x19) 12:02:33 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 12:02:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:02:33 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) (fail_nth: 1) 12:02:33 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) (fail_nth: 1) [ 1187.659372] FAULT_INJECTION: forcing a failure. [ 1187.659372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1187.661124] CPU: 0 UID: 0 PID: 17460 Comm: syz-executor.3 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1187.661141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1187.661147] Call Trace: [ 1187.661151] [ 1187.661156] dump_stack_lvl+0xfa/0x120 [ 1187.661175] should_fail_ex+0x4d7/0x5e0 [ 1187.661192] _copy_from_user+0x30/0xd0 [ 1187.661208] inet6_ioctl+0x221/0x290 [ 1187.661225] ? __pfx_inet6_ioctl+0x10/0x10 [ 1187.661240] ? get_pid_task+0xfd/0x250 [ 1187.661257] ? perf_trace_lock+0xb5/0x5d0 [ 1187.661277] ? __pfx_perf_trace_lock+0x10/0x10 [ 1187.661293] ? proc_fail_nth_write+0x97/0x220 [ 1187.661314] sock_do_ioctl+0xd1/0x240 [ 1187.661326] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1187.661337] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1187.661358] ? do_vfs_ioctl+0x125/0x1470 [ 1187.661380] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1187.661397] ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0 [ 1187.661411] ? __mutex_unlock_slowpath+0x91/0x750 [ 1187.661427] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1187.661444] sock_ioctl+0x40d/0x630 [ 1187.661458] ? __pfx_sock_ioctl+0x10/0x10 [ 1187.661471] ? lock_release+0xc8/0x290 [ 1187.661492] ? selinux_file_ioctl+0xb9/0x280 [ 1187.661506] ? __pfx_sock_ioctl+0x10/0x10 [ 1187.661521] __x64_sys_ioctl+0x18f/0x210 [ 1187.661541] do_syscall_64+0xbf/0x390 [ 1187.661556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.661569] RIP: 0033:0x7fd6a6979b19 [ 1187.661578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1187.661589] RSP: 002b:00007fd6a3eef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1187.661601] RAX: ffffffffffffffda RBX: 00007fd6a6a8cf60 RCX: 00007fd6a6979b19 [ 1187.661609] RDX: 0000000020000040 RSI: 000000000000890c RDI: 0000000000000003 [ 1187.661616] RBP: 00007fd6a3eef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1187.661623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1187.661630] R13: 00007fff4d5eb8df R14: 00007fd6a3eef300 R15: 0000000000022000 [ 1187.661647] [ 1187.671154] FAULT_INJECTION: forcing a failure. [ 1187.671154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1187.687246] CPU: 1 UID: 0 PID: 17471 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1187.687277] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1187.687290] Call Trace: [ 1187.687297] [ 1187.687306] dump_stack_lvl+0xfa/0x120 [ 1187.687332] should_fail_ex+0x4d7/0x5e0 [ 1187.687362] _copy_from_user+0x30/0xd0 [ 1187.687390] inet6_ioctl+0x221/0x290 [ 1187.687420] ? __pfx_inet6_ioctl+0x10/0x10 [ 1187.687448] ? get_pid_task+0xfd/0x250 [ 1187.687477] ? perf_trace_lock+0xb5/0x5d0 [ 1187.687514] ? __pfx_perf_trace_lock+0x10/0x10 [ 1187.687544] ? proc_fail_nth_write+0x97/0x220 [ 1187.687580] sock_do_ioctl+0xd1/0x240 [ 1187.687603] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1187.687623] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1187.687662] ? do_vfs_ioctl+0x125/0x1470 [ 1187.687699] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1187.687732] ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0 [ 1187.687757] ? __mutex_unlock_slowpath+0x91/0x750 [ 1187.687784] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1187.687816] sock_ioctl+0x40d/0x630 [ 1187.687843] ? __pfx_sock_ioctl+0x10/0x10 [ 1187.687869] ? lock_release+0xc8/0x290 [ 1187.687910] ? selinux_file_ioctl+0xb9/0x280 [ 1187.687936] ? __pfx_sock_ioctl+0x10/0x10 [ 1187.687966] __x64_sys_ioctl+0x18f/0x210 [ 1187.688012] do_syscall_64+0xbf/0x390 [ 1187.688041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.688064] RIP: 0033:0x7f96caa4bb19 [ 1187.688081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1187.688102] RSP: 002b:00007f96c7fc1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1187.688124] RAX: ffffffffffffffda RBX: 00007f96cab5ef60 RCX: 00007f96caa4bb19 [ 1187.688139] RDX: 0000000020000040 RSI: 000000000000890c RDI: 0000000000000003 [ 1187.688153] RBP: 00007f96c7fc11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1187.688167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1187.688180] R13: 00007ffc2e287a6f R14: 00007f96c7fc1300 R15: 0000000000022000 [ 1187.688215] 12:02:43 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 12:02:43 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) (fail_nth: 2) 12:02:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:02:43 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x20, r1, 0xd, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x30000}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r2, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r4, 0x10, 0x70bd27, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2008802}, 0x4008000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r9, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:newrole_exec_t:s0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x5c) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x0, 0x0, {0x23}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x50, r1, 0x10, 0x74bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x0, 0x2c, 0x8001}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x0, 0x2e, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7fd}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 12:02:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf000, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:02:43 executing program 0: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="bb92967a1774a30c6fc47e3569745f22b54fbd6807e3509b72209c749654bbe25c37532efa77ac7a33d2f2af5fade825ecceef7bcbc372f824f6976b1bb739b739a361ad2f2612672347414cda78c894f14934ffb6970d44a68a066a97b09f2db26e551477687c9abe1bfd8f65d0f1a12507e36a333062cf8c30d1f18db21e4b7ee845f1512ed5bfa4aec22519c280377d5ca043baa895e61c351ae77ad2f8753132669c59f1454ce6352a0389370277eb56c55d46f15b6e219934312fd5fa2423f83254170d01f4830128e3a6e3a182a8ce7db51a0ffa"], 0x102) 12:02:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:02:43 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) (fail_nth: 2) [ 1197.752314] FAULT_INJECTION: forcing a failure. [ 1197.752314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1197.754119] CPU: 1 UID: 0 PID: 17524 Comm: syz-executor.2 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1197.754149] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1197.754162] Call Trace: [ 1197.754169] [ 1197.754178] dump_stack_lvl+0xfa/0x120 [ 1197.754208] should_fail_ex+0x4d7/0x5e0 [ 1197.754239] _copy_to_user+0x32/0xd0 [ 1197.754268] simple_read_from_buffer+0xe0/0x180 [ 1197.754308] proc_fail_nth_read+0x18a/0x240 [ 1197.754338] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1197.754381] ? security_file_permission+0x22/0x90 [ 1197.754412] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1197.754440] vfs_read+0x1eb/0xc70 [ 1197.754472] ? __pfx_vfs_read+0x10/0x10 [ 1197.754499] ? lock_release+0xc8/0x290 [ 1197.754534] ? __fget_files+0x20d/0x3b0 [ 1197.754570] ksys_read+0x121/0x240 [ 1197.754594] ? __pfx_ksys_read+0x10/0x10 [ 1197.754630] do_syscall_64+0xbf/0x390 [ 1197.754659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.754682] RIP: 0033:0x7f96ca9fe69c [ 1197.754698] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1197.754718] RSP: 002b:00007f96c7fc1170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1197.754739] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f96ca9fe69c [ 1197.754754] RDX: 000000000000000f RSI: 00007f96c7fc11e0 RDI: 0000000000000005 [ 1197.754767] RBP: 00007f96c7fc11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1197.754779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.754792] R13: 00007ffc2e287a6f R14: 00007f96c7fc1300 R15: 0000000000022000 [ 1197.754824] [ 1197.782260] FAULT_INJECTION: forcing a failure. [ 1197.782260] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.784229] CPU: 1 UID: 0 PID: 17525 Comm: syz-executor.3 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1197.784258] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1197.784270] Call Trace: [ 1197.784277] [ 1197.784286] dump_stack_lvl+0xfa/0x120 [ 1197.784312] should_fail_ex+0x4d7/0x5e0 [ 1197.784341] should_failslab+0xc2/0x120 [ 1197.784369] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 1197.784403] ? rt6_nlmsg_size+0x10d/0x450 [ 1197.784436] ? __alloc_skb+0x2ab/0x370 [ 1197.784474] ? __alloc_skb+0x2ab/0x370 [ 1197.784502] __alloc_skb+0x2ab/0x370 [ 1197.784532] ? __pfx___alloc_skb+0x10/0x10 [ 1197.784563] ? __pfx_rt6_nlmsg_size+0x10/0x10 [ 1197.784596] ? lock_is_held_type+0x9e/0x120 [ 1197.784625] inet6_rt_notify+0x1e4/0x4b0 [ 1197.784657] fib6_del+0xf5d/0x1510 [ 1197.784700] ? __pfx_fib6_del+0x10/0x10 [ 1197.784727] ? do_raw_spin_lock+0x123/0x260 [ 1197.784761] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1197.784796] ? cred_has_capability.isra.0+0x1be/0x2c0 [ 1197.784827] ip6_route_del+0x143c/0x1960 [ 1197.784868] ? __pfx_ip6_route_del+0x10/0x10 [ 1197.784900] ? cap_capable+0x9c/0x240 [ 1197.784927] ? security_capable+0x2f/0x90 [ 1197.784954] ipv6_route_ioctl+0x431/0x550 [ 1197.784994] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 1197.785041] ? __might_fault+0xe0/0x190 [ 1197.785075] inet6_ioctl+0x24f/0x290 [ 1197.785103] ? __pfx_inet6_ioctl+0x10/0x10 [ 1197.785130] ? get_pid_task+0xfd/0x250 [ 1197.785166] ? __pfx_perf_trace_lock+0x10/0x10 [ 1197.785196] ? proc_fail_nth_write+0x97/0x220 [ 1197.785230] sock_do_ioctl+0xd1/0x240 [ 1197.785251] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1197.785270] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1197.785307] ? do_vfs_ioctl+0x125/0x1470 [ 1197.785343] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1197.785374] ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0 [ 1197.785399] ? __mutex_unlock_slowpath+0x91/0x750 [ 1197.785424] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1197.785455] sock_ioctl+0x40d/0x630 [ 1197.785481] ? __pfx_sock_ioctl+0x10/0x10 [ 1197.785505] ? lock_release+0xc8/0x290 [ 1197.785543] ? selinux_file_ioctl+0xb9/0x280 [ 1197.785568] ? __pfx_sock_ioctl+0x10/0x10 [ 1197.785596] __x64_sys_ioctl+0x18f/0x210 [ 1197.785632] do_syscall_64+0xbf/0x390 [ 1197.785659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.785681] RIP: 0033:0x7fd6a6979b19 [ 1197.785697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1197.785717] RSP: 002b:00007fd6a3eef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1197.785738] RAX: ffffffffffffffda RBX: 00007fd6a6a8cf60 RCX: 00007fd6a6979b19 [ 1197.785752] RDX: 0000000020000040 RSI: 000000000000890c RDI: 0000000000000003 [ 1197.785765] RBP: 00007fd6a3eef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1197.785778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1197.785790] R13: 00007fff4d5eb8df R14: 00007fd6a3eef300 R15: 0000000000022000 [ 1197.785823] 12:02:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x30000, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:02:44 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:02:44 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="042f10297f"], 0x102) 12:02:44 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 12:02:44 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:02:44 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f"], 0x102) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x1ff, 0x6}}}}, 0x11) 12:02:44 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) (fail_nth: 3) 12:02:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) [ 1198.151481] FAULT_INJECTION: forcing a failure. [ 1198.151481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1198.153840] CPU: 1 UID: 0 PID: 17643 Comm: syz-executor.3 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1198.153879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1198.153900] Call Trace: [ 1198.153912] [ 1198.153925] dump_stack_lvl+0xfa/0x120 [ 1198.153970] should_fail_ex+0x4d7/0x5e0 [ 1198.154028] _copy_from_user+0x30/0xd0 [ 1198.154076] kstrtouint_from_user+0xbd/0x180 [ 1198.154133] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1198.154191] ? __lock_acquire+0xc65/0x1b70 [ 1198.154267] proc_fail_nth_write+0x7b/0x220 [ 1198.154319] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1198.154385] ? lock_is_held_type+0x9e/0x120 [ 1198.154431] vfs_write+0x2b7/0x1150 [ 1198.154475] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1198.154534] ? __pfx_vfs_write+0x10/0x10 [ 1198.154582] ? lock_release+0xc8/0x290 [ 1198.154642] ? __fget_files+0x20d/0x3b0 [ 1198.154701] ksys_write+0x121/0x240 [ 1198.154746] ? __pfx_ksys_write+0x10/0x10 [ 1198.154807] do_syscall_64+0xbf/0x390 [ 1198.154855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.154894] RIP: 0033:0x7fd6a692c5ff [ 1198.154921] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1198.154960] RSP: 002b:00007fd6a3eef170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1198.154994] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd6a692c5ff [ 1198.155019] RDX: 0000000000000001 RSI: 00007fd6a3eef1e0 RDI: 0000000000000005 [ 1198.155043] RBP: 00007fd6a3eef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1198.155067] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1198.155091] R13: 00007fff4d5eb8df R14: 00007fd6a3eef300 R15: 0000000000022000 [ 1198.155142] 12:02:55 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:02:55 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x2, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:02:55 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001a80)={0x110, 0x0, 0x10, 0xffdffffd, 0x255fdbff, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x24044004}, 0x4040050) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r3, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r7, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r11, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1400002}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x20040004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040f0402004320664a631cc963140a643c0313ecd9a228b19f277699b99f4bfcc46dd94bc8fcb009b8028f61d8dddcd95f15da23df9fd55461bf5f4b7ea0be5746c1dfe89252c39724a30ab8cc4940d5a3f6e87a0fec6ba2e01417af1b7b2390bed7fdbdb0e24b8f6bc12c1e67db36779f86f7ead91bc719ed89fa69babc9ae7201a"], 0x7) 12:02:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:02:55 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 12:02:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x80000, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:02:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="1a002600"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r7, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r10, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYRESOCT=r0, @ANYRESDEC=r5, @ANYRESDEC=r2, @ANYRESHEX, @ANYBLOB="67be9c0aa9587a866891d65c0ef60eae4e53cd41bd0ac04684e92ea880f1560eb0bf968e2132667c342e89050634b79397ebfa0d96f946199c36a40e4f37f711f191a3f5f68a5edfc4a5621b68d90340856e6123b69784f36453c5e1a8459d1790d9a93d08c05e7fce790514c63125d9ad40aaf9d87b13526673c4b594d1c0c3926db6246cf2a498cbca8fdaeba9d80233b9f1a5aaa4819cea865258c1e942ae1e9212a762fc32067d52c757cc6fe2a52b4f6234adebccd394631f527bc9c800d8de7c56aa1457b764362e39931a97984051787ac4a8d9a6951dc9f8ca9b81b0bce416b80bea1898923f1489cedc07b35ad0add49de66ee2b4c2f3a64609c8efcdebcbfaf46bd8f5246be5cc36a46bae67a93ef8c1401d7e489d3793ef08f00afb424b29d50f4b10cab6528b7bf3516519b7877459db07b924f0a41c3506f804473126b9e7f959ad802369a49c2f27621a3893d6710591119c1faf45e5093ded45adc2cd14021adc92a435e4175c25367fc84819790dfdf32c48f488c8ae37a1556231f590c4d6c148417fe994fbe1d9d97e48811c13d6d15faa39ddb1e31d6263785f2e8017e7a17d295d8a56ee1333842808e60c7fadcca0df222a23f8cc399ba8365848139c1531a438a9197c48d863c03b37fef34b391befaa7a5bcc19cf4e07d6d7e7353d346c884b7c25125f23b7739b0cbdab7eeb40f6fad57e883cccd455d1900fff22d95286af0b2ffc486505e3f5de74f805450ba2aec564f32286e0be96d44167b4a9e024c7d575a65d98722c2ed628c3dafb2c18c4be5124ffc37f083555b031113941b943dfcfd2cc9a7b2724434a23a27fd72092ba0b10dc8f21b7433d2feb8bf9a3737bbe3bf4b78c4113ee80d7d5489fc5c04cb6d66d6ad6f51557694ce08a3222b64dfabc7f41ce8d5070c8eed7dd73f7ec4fce218b0cd26b7c743f0b7af29b76c1c6a2b6b523a2d1c49c15c5040b4bf5420b05d0f306a30d2d6611a76bfe7b46a6f3e85c48d2797946a10fd35c660289f65acd7bd940db4519e4a829a28b1604aac9952434ce4d893fad817b69d127babee00c6668c07db6ca1bfe09f0b2fb3e084ec745612d671c368a7f7cdcd3b73c72d82bd4f8fd2043823aa0f3ccb06a7b3adc42e0fc8b63d759385b7c1b0e49c6a91d9170f6561a7c89e539c0405b6d3b41a2939a59d75a932dddd23b1f14c6fb355f8ae897c19a85462119ae2218c6eabdedc95e76be443860af047e4c6ad396db066bc62cffb2ce8c3dc49022e61255174bc8a927d3848d7c8ab045539aaf22c7d28200b58489ffb40a58c248855e976091ebfe49ee260bfe53e5449c8b8fbb2607acabf3a3694f9491b118e0e19def2b272261f52a856c5547e01fa45f2ac43a2fbb9693ea27dcab3c32d4aa1daf4408dfeec85cb31a598e9a00bb0074ebc03d887b78419731c5e96e2e98630a4f50184937fb799b44a6bfb1277db6bc53da603271bf119ac810538ed29218f1045c751cf2a81dd160e17fba38943e05cb5925b5380efaccd96bad302090b94f7ad2112642a4cf1a0e8d1896a2e53f2c9c633517211bd726abaf64beecd25ef8664cab408e8631fcc77d7b259612b4682369998351bc81fc9f02cf34f06c32f54af85eb07b1224c571dffd6265876a1e132b1ad59deda9ea538dc3d23be1578cdb6866a6a154cc4fffb024f7547b64c85d7e2a1b9cfbdad80fdd4f3c82d1d0962f0237e443a0627fe47d3e146886607fa65d3ce1fe90cccb209bc3bf93c1aad682e01134eb3bd86178784c742b09b21e159b93d60079d52f1e97cecea67bae9cebad87df3e319ce468f661ff3333a4ae00925b1e192b011da9720cd058937c3202f9ce488fba918b140fb262622ff91b7afab64297cbe9f8167ac627e4db2055097623bad96ddc475518182eac8962e00a38b31e8caa644dd0d8a8169f92973b6aa4b1fc5c82483f42e139e43ac8a51635d925d615868351404ab71c1962c31fe35e46db634e47e5d4f83b2bb00b7a7cbcf416ef2072693e42fbc43723a6e3d75954cead70f6c5037e816b950e5af51d8810c8f08f391666d546d23ea577932bb21a6bf37a13ba1e116f8d53bace3ba42d0a08a2aa6f9f154e71ba03a48b6d73d4bea9058a256351599c257404e65b59f949b39434a0bf61612c82a436738f10b5752d7fd54968fc3a1deab41343073d5711b4338a32d40534fc8812171314419e2bb97e7f0e558789feb9ecf0fcf3a7f63c288adf22a5b967bf4be4360d4ca85f83d9a40bf47f0352a515c7e3e44f0b1647fe9f331b040e0c3f8647c71094b1312281ea190546a9f38f89d094554eea15cbd723bc6d1c114f95700c7753baa972abf5177e3257e433bf04f0b157688f7908137fe95d1a215081295bbc6a5af44ece1a5894f08c77cc5b91671c63d2803b8f6cefc8471c71b2e23f57676c535c6a33515676c035dee4516c69515adfb7944b9dbdb0fb105921e0a47dc0edc4869c8bba84b4cf3511f54bd41f8a0fa9819fee9346f33310b6df1d6f60555c7337c25ff054e901f0bf128523d61f9a3bec8edf90ca7bb02177d989596c85e3da36408ef5f7d4edb2b8827211f0997893ba9fdb0cb70e4cda75224cbd4cae9ad37588087014c5b7831d31b43376eee92b6144f35ada1ee0239e9a2074bb4392803ab89d263dd0cfff6d056e3eba7a6bbe94438d409a151b22ef1bff60e164118851e4e41366de4df9302001f8d33b706e35a428ee8ce3682b6e5efae7e8cbd1ad72069cc3ececc6a4703a69afd6e51e4b652d01eca603f83d5d4f747130fab49e3d24ed8cc87210865f53ecc77a200d8289358f0a67ddfa1276289b6e85cc1479c215da26000cf8e1e4525d0b54883b69807ab27bdbf61e0d770dba82f7c56ee603d56e9b043cb8378e374ab27dbb4b79fc488a4f7f8dff68c606e5c3c94db3c5ee06fad30ade36ce33e766dd143bc18707414830a0667303002a3d76b67c06eb677848e197dd729e341248c0c23309f4cdbf3b9ca5b48519e549b3596aea7df9e1d771732f2386dc5ebb85d487ff4ad0d84c6cd0b16fa4d433698d8155ce8eac5dbffd0bc0a96ba3abedd5ec50de57b87f8d0d6ef289830761f06ce62fe08818ceb87ecdf981626c7d1473c1cbcd1bdcc3b9053bf607f0d5b1b0c0b076e679d07c87aeec05ac49a230edd9450686499fb408fc1148368f21d6f4c3f93ecddab7f5352ba6899a35de45362c8b1fdd34a3f2ca2859105e271932667bb8c7bfe32fb84f940b0fcb8295d9d29e219f5a98ee2292425d644b5929ea7177a11ae90ea8e33099e1c63fc3dd4d17724e14232c6a5a3aa3b78306ee90f0138be49e0100472492fccce56f9c85f84cfe5c00c525878b560c8ed4cbee297d5181a8161fa640b62daf8f85a7a5452b6a6c897905266a87c1683befdf45feb6e715f15a6ad98110664163a49f225d57a67b7e1ace61494b39ccb51a0d84e0c5f8ab219aebb2cc4087fe2134aa0ca1381524e2d4180cea5cc21258ebdaa400069e882f045d4e569460e0420cc5075dda1fee7b2ae2a50d140ac8490121cf39bd2f4dbba9170f9a84981c63ef962fc042d7ed9735ae3c0f5b1d23b889f1c5a33d3f1e1557f08aa6aa8f8d1546d60297539b15529de60a485dba3b3b0e0808e0e54e44cf1c53f9d6130f1f0acf75d2b87cd638f2c2286c97dd733a01bec1513a05e985f81a299cee7f3561a4c37be8d3e24d1fe06cd96b80c1d70dd7c3037c1392b2cff5226fac285df9f110cb8c027d61c704fe636298a389407c2e1d85106b4b112e35d72ccb14708294721925ae78e51dc5292d1bf1e0c25997e1ca18a22387951c31fa21bac9c1941a64938cabb9f30eb96e54a4df808b7c23a4d6bac3f1eaec6f8ecd5211edc1ce35427c72b702bc8b730f2e4f2d26a2013192b2b09a3bc767a1444ab98e02cd111689f36dc47b27921c9e9901d08e2791070fec739e90b0aebd1d78bec60bc8daeb1d39ec5d42b8b001e9e272cd4d60afcb841c36acb448144c8c3817b687d00ca641e858aa38cdbe944b5665f3addf102068405f97a8ad40d077bf9cdf62cc0919c49bf3a096703275a4d54fcd8eb9a88f7102ea941a395e06e79f500823cf56e21ca2469956e631d46e50bb5dcebb9f57565c24b5ecefd8691fe8720a7cd32322436de0625d82be5f43580397254f1439177908b59f8c7001632a2d621572be257c51669e9a6f85f21df71fa9451fce23ee2f81b5280a74b6cf8dfbe595ad3a0ca94b7bffef5c5776e894f4bc99ae290a2422c1706dead17dcd7907d03e8ce465d631d40df2e243e5bb12ab02da3c99c63096774e8a74d3b4b7894ccd111525b23bb9f914d6a5d591923584a823cddb32d6f8dded64e040df054731c962ae41f1d749249486d4368f776edd24cb919855a862b79267681a793d6265ff7745fb730fff701fd9809ad70525fcac3a80f0c1a3b66097ddd68e48cc955ff6771d47bdd5480582e8b64fb0a4ceaa9866dd0b92f124aa267ea52b00f0c2499170dedaaa27cb2edd32c328ca2b47550ae8ef0e24e004bf1a684608b67a6cf5f2175bb0b8fd9362dc97ecac516e3c95ae24ec8095e980cd7a314d3f7b148ca448073f11deee7b32ff16ef0f731a32269f6ed62a69292f5be74b008a8c4d145f082d1c439c234ad03a568bb0fbaae86be7939723c52fefd4f79487ff74e0dccc75c46f56fd59bd413041982d41095b69cc598d39ca88f57debffc315645fe547726af1031daf49afe0a9f053500e5574576b63dfd3a487e35f5cee757bd930fde0f1dca82249152733b9fa84b9133e32f327084c0b60839d00cf883eb74fc4ec0874156b0dfa8f14a3508dd7782b3f62ad5626e8cbda0cf4b9cafc02dbe8bb85316872844c7a4acee3f33c39765655b6f67081fe42eb8662d78b73939f8ac726b7d6f109d2bfd4a4568b9bbbad8bca3a83abbfea21bbe8277c15f6f393f0be45b97e7acf9d382f1924616221adccd0ea7203a696673a13311eeeef582e5c8c3ca37291f96dd70a91b96a0960cee550ac855741555b162cff6fc7c78d1326d84b805a51bca016968e6f671a791d6cff8612949292452ddb736a3bb64ffdcf0540ff799499e31504f56c485639fdf853a2e12194fb273f71b91dca7b6e21ca1525b2e44fc8b6057995d6429fd4308e8532d81d8ba3d8b8c163b2a78caf3c435f0c43094dbb88c5599774a6a519d0edd46c0fd550474206d87d7984906dddbf5c08c45b9818bf14fea07b8d018b794ac6df50c301c72caf32dc364b0eb677d8bc542d3c6cf40e425ba53b57254a99c587746137c7b2ac89206c822c1ae48842ebc0b1a1f27dc06ac06b0f3264a697619b57ab96890cc0c1e25598c98c63117016615b51de51be3269f163e217ba8475b196249280b5d9729625faff72c0db3adb42c3e108fa53ee7808975c7318fc50bb866f6ddae7a621e410bfbca6958eaa10488d51a67180c05fda89594a29692ff6a4afd6a3fdc21271eb406dd2e38612585ccffd64311f7110ab10a97b77190a35fdb8490715f8a5d9702a5d4114b40d5bfaf7477389fd95faf2a54bd4ceb897ac2c66d14217447e42459637bb0979b63546d701d86df78bb5b82669d8e17b3234b474283a6bbc47f85efd69037d65a948a7d12c6b231142d7669531d0c7c9b60baf7c3689785491df5b75c395dd9a5db18fe976a2d5ad3c9dc3bc0f04920fc7a59817d88abd57cc5e7a350c34408f53e6cdc01d1ad6870b90c549d40202ba67260dd2dc4f213c4495407cd676b6", @ANYRES16=r6, @ANYRESDEC, @ANYRESDEC=r9], 0xee) 12:02:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 1) [ 1208.985418] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1209.010746] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1209.014524] FAULT_INJECTION: forcing a failure. [ 1209.014524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1209.016353] CPU: 1 UID: 0 PID: 17666 Comm: syz-executor.1 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1209.016384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1209.016397] Call Trace: [ 1209.016405] [ 1209.016414] dump_stack_lvl+0xfa/0x120 [ 1209.016445] should_fail_ex+0x4d7/0x5e0 [ 1209.016477] _copy_from_user+0x30/0xd0 [ 1209.016507] copy_msghdr_from_user+0x88/0x150 [ 1209.016544] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1209.016584] ? __pfx_perf_trace_lock+0x10/0x10 [ 1209.016624] ? lock_acquire+0x15e/0x2f0 [ 1209.016661] ___sys_sendmsg+0xdc/0x1b0 [ 1209.016697] ? __pfx____sys_sendmsg+0x10/0x10 [ 1209.016729] ? perf_trace_lock+0xb5/0x5d0 [ 1209.016766] ? __pfx_perf_trace_lock+0x10/0x10 [ 1209.016797] ? proc_fail_nth_write+0x97/0x220 [ 1209.016832] ? lock_acquire+0x15e/0x2f0 [ 1209.016862] ? __fget_files+0x34/0x3b0 [ 1209.016888] ? find_held_lock+0x2b/0x80 [ 1209.016911] ? __fget_files+0x203/0x3b0 [ 1209.016936] ? lock_release+0xc8/0x290 [ 1209.016973] ? __fget_files+0x20d/0x3b0 [ 1209.017017] __sys_sendmsg+0x150/0x200 [ 1209.017051] ? __pfx___sys_sendmsg+0x10/0x10 [ 1209.017091] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1209.017121] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1209.017154] ? ksys_write+0x1a3/0x240 [ 1209.017180] ? __pfx_ksys_write+0x10/0x10 [ 1209.017219] do_syscall_64+0xbf/0x390 [ 1209.017249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.017273] RIP: 0033:0x7f7432c87b19 [ 1209.017291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1209.017313] RSP: 002b:00007f74301fd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1209.017336] RAX: ffffffffffffffda RBX: 00007f7432d9af60 RCX: 00007f7432c87b19 [ 1209.017351] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1209.017365] RBP: 00007f74301fd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1209.017379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1209.017392] R13: 00007ffdfef66cff R14: 00007f74301fd300 R15: 0000000000022000 [ 1209.017426] 12:02:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0ffff, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:02:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12:02:55 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x2, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:02:55 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:02:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) [ 1209.133958] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 12:02:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x1000000, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:02:55 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x4b47, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:02:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r2, @ANYRES64=r0, @ANYRES16=r3], 0x7) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r6, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x24}}, 0xc011) 12:02:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 2) [ 1209.322236] FAULT_INJECTION: forcing a failure. [ 1209.322236] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.324140] CPU: 1 UID: 0 PID: 17795 Comm: syz-executor.1 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1209.324170] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1209.324182] Call Trace: [ 1209.324189] [ 1209.324197] dump_stack_lvl+0xfa/0x120 [ 1209.324227] should_fail_ex+0x4d7/0x5e0 [ 1209.324256] should_failslab+0xc2/0x120 [ 1209.324284] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 1209.324321] ? __alloc_skb+0x2ab/0x370 [ 1209.324358] ? __alloc_skb+0x2ab/0x370 [ 1209.324385] ? __pfx_netlink_insert+0x10/0x10 [ 1209.324416] __alloc_skb+0x2ab/0x370 [ 1209.324447] ? __pfx___alloc_skb+0x10/0x10 [ 1209.324476] ? netlink_autobind.isra.0+0x158/0x370 [ 1209.324522] netlink_alloc_large_skb+0x69/0x150 [ 1209.324557] netlink_sendmsg+0x66d/0xd80 [ 1209.324597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1209.324645] ____sys_sendmsg+0xa67/0xc20 [ 1209.324671] ? copy_msghdr_from_user+0xfb/0x150 [ 1209.324703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1209.324738] ? lock_acquire+0x15e/0x2f0 [ 1209.324773] ___sys_sendmsg+0x10f/0x1b0 [ 1209.324806] ? __pfx____sys_sendmsg+0x10/0x10 [ 1209.324835] ? perf_trace_lock+0xb5/0x5d0 [ 1209.324871] ? __pfx_perf_trace_lock+0x10/0x10 [ 1209.324899] ? proc_fail_nth_write+0x97/0x220 [ 1209.324931] ? lock_acquire+0x15e/0x2f0 [ 1209.324959] ? __fget_files+0x34/0x3b0 [ 1209.324990] ? find_held_lock+0x2b/0x80 [ 1209.325013] ? __fget_files+0x203/0x3b0 [ 1209.325038] ? lock_release+0xc8/0x290 [ 1209.325071] ? __fget_files+0x20d/0x3b0 [ 1209.325106] __sys_sendmsg+0x150/0x200 [ 1209.325138] ? __pfx___sys_sendmsg+0x10/0x10 [ 1209.325182] ? __pfx_ksys_write+0x10/0x10 [ 1209.325219] do_syscall_64+0xbf/0x390 [ 1209.325247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.325269] RIP: 0033:0x7f7432c87b19 [ 1209.325286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1209.325306] RSP: 002b:00007f74301fd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1209.325327] RAX: ffffffffffffffda RBX: 00007f7432d9af60 RCX: 00007f7432c87b19 [ 1209.325342] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1209.325354] RBP: 00007f74301fd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1209.325367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1209.325379] R13: 00007ffdfef66cff R14: 00007f74301fd300 R15: 0000000000022000 [ 1209.325411] 12:03:05 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:03:05 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x5, 0xa}, {0x6, 0xe06, 0x1, 0x1, 0x7fff}}}}, 0x17) 12:03:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 3) 12:03:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x440c5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r5, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r8, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="7504ea3c771fd53a097222de54615e94834c34e80dac94f27ec979b27886f66b991740cf11d5cda42a554acea0c9d7bedeb41153bf484c718072d7368f9df155b6580a06a82c8f3349d844d75e81b4936d8f8ad9b9b6d908642d5b9ad29ebed8aba6fb6a262c4873af8ded70b801cc5816676cfd00ad6845d383a2d8f9ab9158e698c3f1f07135dccea09c3e330bebdc20c45cd044dc", @ANYRESOCT, @ANYRESOCT=r3, @ANYRES64=0x0, @ANYRES32=r3, @ANYRES32=r0, @ANYRES16=r6, @ANYRESHEX, @ANYRESHEX=r8, @ANYRES32], 0x102) 12:03:05 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x4b49, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:03:05 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x4b47, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 1) [ 1219.329177] FAULT_INJECTION: forcing a failure. [ 1219.329177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1219.330303] CPU: 0 UID: 0 PID: 17915 Comm: syz-executor.7 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1219.330319] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1219.330326] Call Trace: [ 1219.330330] [ 1219.330335] dump_stack_lvl+0xfa/0x120 [ 1219.330353] should_fail_ex+0x4d7/0x5e0 [ 1219.330371] _copy_from_user+0x30/0xd0 [ 1219.330386] copy_msghdr_from_user+0x88/0x150 [ 1219.330406] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1219.330425] ? __pfx_perf_trace_lock+0x10/0x10 [ 1219.330446] ? lock_acquire+0x15e/0x2f0 [ 1219.330465] ___sys_sendmsg+0xdc/0x1b0 [ 1219.330483] ? __pfx____sys_sendmsg+0x10/0x10 [ 1219.330499] ? perf_trace_lock+0xb5/0x5d0 [ 1219.330517] ? __pfx_perf_trace_lock+0x10/0x10 [ 1219.330532] ? proc_fail_nth_write+0x97/0x220 [ 1219.330551] ? lock_acquire+0x15e/0x2f0 [ 1219.330566] ? __fget_files+0x34/0x3b0 [ 1219.330580] ? find_held_lock+0x2b/0x80 [ 1219.330592] ? __fget_files+0x203/0x3b0 [ 1219.330605] ? lock_release+0xc8/0x290 [ 1219.330633] ? __fget_files+0x20d/0x3b0 [ 1219.330651] __sys_sendmsg+0x150/0x200 [ 1219.330669] ? __pfx___sys_sendmsg+0x10/0x10 [ 1219.330689] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1219.330705] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1219.330722] ? ksys_write+0x1a3/0x240 [ 1219.330736] ? __pfx_ksys_write+0x10/0x10 [ 1219.330756] do_syscall_64+0xbf/0x390 [ 1219.330772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.330785] RIP: 0033:0x7f917e36fb19 [ 1219.330794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1219.330805] RSP: 002b:00007f917b8e5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1219.330817] RAX: ffffffffffffffda RBX: 00007f917e482f60 RCX: 00007f917e36fb19 [ 1219.330825] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1219.330832] RBP: 00007f917b8e51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1219.330840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1219.330847] R13: 00007ffe5acfcc8f R14: 00007f917b8e5300 R15: 0000000000022000 [ 1219.330864] 12:03:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3000000, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:03:05 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x541b, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:05 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:03:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 2) 12:03:05 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x4b49, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:05 executing program 0: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000040)=0x9) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="f62e10297f"], 0x102) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r3, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) 12:03:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 4) [ 1219.521855] FAULT_INJECTION: forcing a failure. [ 1219.521855] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.523707] CPU: 0 UID: 0 PID: 17930 Comm: syz-executor.7 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1219.523737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1219.523749] Call Trace: [ 1219.523756] [ 1219.523764] dump_stack_lvl+0xfa/0x120 [ 1219.523794] should_fail_ex+0x4d7/0x5e0 [ 1219.523822] should_failslab+0xc2/0x120 [ 1219.523851] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 1219.523888] ? __alloc_skb+0x2ab/0x370 [ 1219.523927] ? __alloc_skb+0x2ab/0x370 [ 1219.523955] ? __pfx_netlink_insert+0x10/0x10 [ 1219.523994] __alloc_skb+0x2ab/0x370 [ 1219.524024] ? __pfx___alloc_skb+0x10/0x10 [ 1219.524056] ? netlink_autobind.isra.0+0x158/0x370 [ 1219.524111] netlink_alloc_large_skb+0x69/0x150 [ 1219.524151] netlink_sendmsg+0x66d/0xd80 [ 1219.524191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1219.524240] ____sys_sendmsg+0xa67/0xc20 [ 1219.524270] ? copy_msghdr_from_user+0xfb/0x150 [ 1219.524305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1219.524341] ? lock_acquire+0x15e/0x2f0 [ 1219.524376] ___sys_sendmsg+0x10f/0x1b0 [ 1219.524409] ? __pfx____sys_sendmsg+0x10/0x10 [ 1219.524441] ? perf_trace_lock+0xb5/0x5d0 [ 1219.524477] ? __pfx_perf_trace_lock+0x10/0x10 [ 1219.524507] ? proc_fail_nth_write+0x97/0x220 [ 1219.524540] ? lock_acquire+0x15e/0x2f0 [ 1219.524569] ? __fget_files+0x34/0x3b0 [ 1219.524593] ? find_held_lock+0x2b/0x80 [ 1219.524616] ? __fget_files+0x203/0x3b0 [ 1219.524638] ? lock_release+0xc8/0x290 [ 1219.524672] ? __fget_files+0x20d/0x3b0 [ 1219.524707] __sys_sendmsg+0x150/0x200 [ 1219.524739] ? __pfx___sys_sendmsg+0x10/0x10 [ 1219.524783] ? __pfx_ksys_write+0x10/0x10 [ 1219.524820] do_syscall_64+0xbf/0x390 [ 1219.524848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.524870] RIP: 0033:0x7f917e36fb19 [ 1219.524886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1219.524907] RSP: 002b:00007f917b8e5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1219.524928] RAX: ffffffffffffffda RBX: 00007f917e482f60 RCX: 00007f917e36fb19 [ 1219.524942] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1219.524955] RBP: 00007f917b8e51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1219.524968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1219.524980] R13: 00007ffe5acfcc8f R14: 00007f917b8e5300 R15: 0000000000022000 [ 1219.525011] 12:03:05 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x5421, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x4000000, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:03:05 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:03:05 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x541b, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:05 executing program 0: syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0x102) 12:03:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 5) 12:03:05 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x5450, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:15 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x5421, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 3) 12:03:15 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x5451, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x5000000, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:03:15 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:03:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESDEC=r2], 0x102) 12:03:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 6) 12:03:15 executing program 6: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001ac0)='/proc/diskstats\x00', 0x0, 0x0) syz_io_uring_setup(0x74a5, &(0x7f0000001ec0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000001f40), &(0x7f0000001f80)) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd66}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48004}, 0x40020d4) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x81, @none, 0x2}}}, 0xb) r4 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xc, 0x8, 0x1, 0x8, 0x0, 0x6, 0x23000, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000240), 0x4}, 0x200, 0x7ff, 0x3, 0x3, 0x20, 0xd377, 0x0, 0x0, 0x8, 0x0, 0x8000}, 0xffffffffffffffff, 0xc, r1, 0x2) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000300)) r5 = syz_open_dev$mouse(&(0x7f00000003c0), 0xfffffffffffeffff, 0xce980) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000580)={&(0x7f0000000400), 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe8, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20001405}, 0x4008804) 12:03:15 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x5452, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 4) 12:03:15 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) [ 1229.656052] FAULT_INJECTION: forcing a failure. [ 1229.656052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1229.658255] CPU: 1 UID: 0 PID: 17976 Comm: syz-executor.1 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1229.658286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1229.658300] Call Trace: [ 1229.658307] [ 1229.658316] dump_stack_lvl+0xfa/0x120 [ 1229.658349] should_fail_ex+0x4d7/0x5e0 [ 1229.658383] _copy_from_iter+0x1dc/0x1660 [ 1229.658412] ? lock_acquire+0x15e/0x2f0 [ 1229.658445] ? __virt_addr_valid+0x1c6/0x5d0 [ 1229.658471] ? find_held_lock+0x2b/0x80 [ 1229.658498] ? __pfx__copy_from_iter+0x10/0x10 [ 1229.658522] ? lock_release+0xc8/0x290 [ 1229.658560] ? __virt_addr_valid+0x100/0x5d0 [ 1229.658587] ? __check_object_size+0x57b/0x880 [ 1229.658619] netlink_sendmsg+0x800/0xd80 [ 1229.658666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1229.658722] ____sys_sendmsg+0xa67/0xc20 [ 1229.658771] ? copy_msghdr_from_user+0xfb/0x150 [ 1229.658807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1229.658848] ? lock_acquire+0x15e/0x2f0 [ 1229.658885] ___sys_sendmsg+0x10f/0x1b0 [ 1229.658922] ? __pfx____sys_sendmsg+0x10/0x10 [ 1229.658954] ? perf_trace_lock+0xb5/0x5d0 [ 1229.659000] ? __pfx_perf_trace_lock+0x10/0x10 [ 1229.659031] ? proc_fail_nth_write+0x97/0x220 [ 1229.659068] ? lock_acquire+0x15e/0x2f0 [ 1229.659098] ? __fget_files+0x34/0x3b0 [ 1229.659125] ? find_held_lock+0x2b/0x80 [ 1229.659149] ? __fget_files+0x203/0x3b0 [ 1229.659174] ? lock_release+0xc8/0x290 [ 1229.659211] ? __fget_files+0x20d/0x3b0 [ 1229.659252] __sys_sendmsg+0x150/0x200 [ 1229.659287] ? __pfx___sys_sendmsg+0x10/0x10 [ 1229.659336] ? __pfx_ksys_write+0x10/0x10 [ 1229.659379] do_syscall_64+0xbf/0x390 [ 1229.659410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.659434] RIP: 0033:0x7f7432c87b19 [ 1229.659453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1229.659474] RSP: 002b:00007f74301fd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1229.659497] RAX: ffffffffffffffda RBX: 00007f7432d9af60 RCX: 00007f7432c87b19 [ 1229.659512] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1229.659526] RBP: 00007f74301fd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1229.659540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1229.659553] R13: 00007ffdfef66cff R14: 00007f74301fd300 R15: 0000000000022000 [ 1229.659592] 12:03:15 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x5450, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:15 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x5460, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:24 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 5) 12:03:24 executing program 6: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f045f846386"], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x79, 0xc8, 0x3ff}}}, 0x8) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x9, 0x2}, {0x9}}}}, 0xf) 12:03:24 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x5451, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x6000000, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:03:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 7) 12:03:24 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8901, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:24 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x14, r0, 0x1}, 0x14}}, 0x0) 12:03:24 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') fcntl$notify(r0, 0x402, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040700001cda7e0c53"], 0x102) 12:03:24 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 6) 12:03:24 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042f10297f"], 0x102) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0xa7, 0xc8, 0x2}}}, 0x7) [ 1238.257533] FAULT_INJECTION: forcing a failure. [ 1238.257533] name failslab, interval 1, probability 0, space 0, times 0 [ 1238.258593] CPU: 1 UID: 0 PID: 18108 Comm: syz-executor.1 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1238.258609] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1238.258616] Call Trace: [ 1238.258621] [ 1238.258625] dump_stack_lvl+0xfa/0x120 [ 1238.258645] should_fail_ex+0x4d7/0x5e0 [ 1238.258663] should_failslab+0xc2/0x120 [ 1238.258680] __kmalloc_noprof+0xcd/0x680 [ 1238.258699] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1238.258715] ? avc_has_perm_noaudit+0x150/0x3d0 [ 1238.258735] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1238.258752] genl_family_rcv_msg_doit+0xab/0x2f0 [ 1238.258765] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1238.258778] ? trace_cap_capable+0x156/0x1b0 [ 1238.258794] ? cap_capable+0x9c/0x240 [ 1238.258808] ? security_capable+0x2f/0x90 [ 1238.258821] ? ns_capable+0xe2/0x120 [ 1238.258835] genl_rcv_msg+0x532/0x7e0 [ 1238.258850] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1238.258871] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1238.258890] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 1238.258901] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1238.258923] netlink_rcv_skb+0x147/0x430 [ 1238.258942] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1238.258955] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1238.258986] ? netlink_deliver_tap+0x1ae/0xce0 [ 1238.259007] genl_rcv+0x28/0x40 [ 1238.259017] netlink_unicast+0x5a7/0x870 [ 1238.259041] ? __pfx_netlink_unicast+0x10/0x10 [ 1238.259067] netlink_sendmsg+0x8a3/0xd80 [ 1238.259089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1238.259115] ____sys_sendmsg+0xa67/0xc20 [ 1238.259130] ? copy_msghdr_from_user+0xfb/0x150 [ 1238.259148] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1238.259167] ? lock_acquire+0x15e/0x2f0 [ 1238.259187] ___sys_sendmsg+0x10f/0x1b0 [ 1238.259205] ? __pfx____sys_sendmsg+0x10/0x10 [ 1238.259222] ? perf_trace_lock+0xb5/0x5d0 [ 1238.259242] ? __pfx_perf_trace_lock+0x10/0x10 [ 1238.259257] ? proc_fail_nth_write+0x97/0x220 [ 1238.259276] ? lock_acquire+0x15e/0x2f0 [ 1238.259291] ? __fget_files+0x34/0x3b0 [ 1238.259305] ? find_held_lock+0x2b/0x80 [ 1238.259318] ? __fget_files+0x203/0x3b0 [ 1238.259330] ? lock_release+0xc8/0x290 [ 1238.259349] ? __fget_files+0x20d/0x3b0 [ 1238.259368] __sys_sendmsg+0x150/0x200 [ 1238.259385] ? __pfx___sys_sendmsg+0x10/0x10 [ 1238.259408] ? __pfx_ksys_write+0x10/0x10 [ 1238.259430] do_syscall_64+0xbf/0x390 [ 1238.259446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.259459] RIP: 0033:0x7f7432c87b19 [ 1238.259468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1238.259479] RSP: 002b:00007f74301fd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1238.259491] RAX: ffffffffffffffda RBX: 00007f7432d9af60 RCX: 00007f7432c87b19 [ 1238.259499] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1238.259506] RBP: 00007f74301fd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1238.259513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1238.259520] R13: 00007ffdfef66cff R14: 00007f74301fd300 R15: 0000000000022000 [ 1238.259538] 12:03:24 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x5452, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:24 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x102) [ 1238.377946] FAULT_INJECTION: forcing a failure. [ 1238.377946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1238.380026] CPU: 0 UID: 0 PID: 18157 Comm: syz-executor.7 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1238.380058] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1238.380072] Call Trace: [ 1238.380080] [ 1238.380088] dump_stack_lvl+0xfa/0x120 [ 1238.380121] should_fail_ex+0x4d7/0x5e0 [ 1238.380155] _copy_from_iter+0x1dc/0x1660 [ 1238.380183] ? lock_acquire+0x15e/0x2f0 [ 1238.380215] ? __virt_addr_valid+0x1c6/0x5d0 [ 1238.380241] ? find_held_lock+0x2b/0x80 [ 1238.380268] ? __pfx__copy_from_iter+0x10/0x10 [ 1238.380291] ? lock_release+0xc8/0x290 [ 1238.380331] ? __virt_addr_valid+0x100/0x5d0 [ 1238.380358] ? __check_object_size+0x57b/0x880 [ 1238.380390] netlink_sendmsg+0x800/0xd80 [ 1238.380437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1238.380492] ____sys_sendmsg+0xa67/0xc20 [ 1238.380522] ? copy_msghdr_from_user+0xfb/0x150 [ 1238.380557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1238.380598] ? lock_acquire+0x15e/0x2f0 [ 1238.380634] ___sys_sendmsg+0x10f/0x1b0 [ 1238.380671] ? __pfx____sys_sendmsg+0x10/0x10 [ 1238.380703] ? perf_trace_lock+0xb5/0x5d0 [ 1238.380742] ? __pfx_perf_trace_lock+0x10/0x10 [ 1238.380772] ? proc_fail_nth_write+0x97/0x220 [ 1238.380809] ? lock_acquire+0x15e/0x2f0 [ 1238.380839] ? __fget_files+0x34/0x3b0 [ 1238.380865] ? find_held_lock+0x2b/0x80 [ 1238.380888] ? __fget_files+0x203/0x3b0 [ 1238.380913] ? lock_release+0xc8/0x290 [ 1238.380951] ? __fget_files+0x20d/0x3b0 [ 1238.380997] __sys_sendmsg+0x150/0x200 [ 1238.381032] ? __pfx___sys_sendmsg+0x10/0x10 [ 1238.381082] ? __pfx_ksys_write+0x10/0x10 [ 1238.381124] do_syscall_64+0xbf/0x390 [ 1238.381156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.381180] RIP: 0033:0x7f917e36fb19 [ 1238.381198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1238.381219] RSP: 002b:00007f917b8e5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1238.381242] RAX: ffffffffffffffda RBX: 00007f917e482f60 RCX: 00007f917e36fb19 [ 1238.381258] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1238.381272] RBP: 00007f917b8e51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1238.381286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1238.381299] R13: 00007ffe5acfcc8f R14: 00007f917b8e5300 R15: 0000000000022000 [ 1238.381337] 12:03:24 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8902, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x7000000, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:03:24 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x5460, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 8) 12:03:24 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRES64, @ANYRESHEX=0x0], 0x102) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x8f}, "32810b38cc8df6900ca1bedd7e87eeea9254fd12bac015020ff8dacae07d6734db84dfd629813928197a4e0ad7f47b48979649f859dc89d342fe944c85592feb9d117c0f6460f74ee22c91feda7aedb599d190b5d473370f837b59d6251ae893e3de55d45234a36ff8f3fbf19fb8c1fb65453002bd522f536e7e5b64605f3a6f1ef4e233d42fdae9d7c61a9d066be4"}, 0x93) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0xc0}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@any, 0x1, 0x7, 0x20}}}, 0xc) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xcf}, "69db62244241f7c97062fe7ff38a92b14411c8b65135566c65326b0388943c7834b94056786929e8084e505ded515804ce1d6480c4f35fdf6b7526e1e748eaeabf7a1175b526209741f02e50789c350f30524baba0d9fc1c223ae1e658d525da98243fbab1602488b14c738f36c3087840b4ba7f2f608d938b9698c6e1fa39d6b6c83521f8da835f3f686f316ffd09538dbee07ad2784e3c165e7b0097d9a667bd08bd7291e3ba78974742ce32323fcc2997b7c561e17a73ee71157d93948a3872b96e3ded62020cfa2bcd0f49b32b"}, 0xd3) 12:03:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9000000, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:03:34 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8903, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:34 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0xc, &(0x7f0000000100)=[@timestamp, @timestamp, @mss, @sack_perm], 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) 12:03:34 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x14, r0, 0x1}, 0x14}}, 0x0) 12:03:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 7) 12:03:34 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8901, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:34 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="2e5251548a65a2c4d0ab6b3c02890b4c0ad4acdff43a2087bac709a2d9d7c2c0b54dba73c44f4bf8f9f322a3f3e731ef01ee66cdbc71c980c000375ddb2f0a2c50c47bc7e7850d52bfc0cafdbd"], 0x4) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x3f, 0xc9, 0x7}}}, 0x7) 12:03:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 9) [ 1248.825461] FAULT_INJECTION: forcing a failure. [ 1248.825461] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.827216] CPU: 0 UID: 0 PID: 18274 Comm: syz-executor.7 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1248.827246] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1248.827258] Call Trace: [ 1248.827266] [ 1248.827274] dump_stack_lvl+0xfa/0x120 [ 1248.827305] should_fail_ex+0x4d7/0x5e0 [ 1248.827336] should_failslab+0xc2/0x120 [ 1248.827366] __kmalloc_noprof+0xcd/0x680 [ 1248.827400] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1248.827427] ? avc_has_perm_noaudit+0x150/0x3d0 [ 1248.827463] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1248.827496] genl_family_rcv_msg_doit+0xab/0x2f0 [ 1248.827521] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1248.827545] ? trace_cap_capable+0x156/0x1b0 [ 1248.827573] ? cap_capable+0x9c/0x240 [ 1248.827600] ? security_capable+0x2f/0x90 [ 1248.827623] ? ns_capable+0xe2/0x120 [ 1248.827649] genl_rcv_msg+0x532/0x7e0 [ 1248.827677] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1248.827700] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1248.827733] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 1248.827753] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1248.827792] netlink_rcv_skb+0x147/0x430 [ 1248.827828] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1248.827853] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1248.827903] ? netlink_deliver_tap+0x1ae/0xce0 [ 1248.827943] genl_rcv+0x28/0x40 [ 1248.827962] netlink_unicast+0x5a7/0x870 [ 1248.828009] ? __pfx_netlink_unicast+0x10/0x10 [ 1248.828059] netlink_sendmsg+0x8a3/0xd80 [ 1248.828100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1248.828150] ____sys_sendmsg+0xa67/0xc20 [ 1248.828177] ? copy_msghdr_from_user+0xfb/0x150 [ 1248.828210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1248.828247] ? lock_acquire+0x15e/0x2f0 [ 1248.828282] ___sys_sendmsg+0x10f/0x1b0 [ 1248.828316] ? __pfx____sys_sendmsg+0x10/0x10 [ 1248.828347] ? perf_trace_lock+0xb5/0x5d0 [ 1248.828384] ? __pfx_perf_trace_lock+0x10/0x10 [ 1248.828413] ? proc_fail_nth_write+0x97/0x220 [ 1248.828446] ? lock_acquire+0x15e/0x2f0 [ 1248.828475] ? __fget_files+0x34/0x3b0 [ 1248.828499] ? find_held_lock+0x2b/0x80 [ 1248.828522] ? __fget_files+0x203/0x3b0 [ 1248.828545] ? lock_release+0xc8/0x290 [ 1248.828580] ? __fget_files+0x20d/0x3b0 [ 1248.828616] __sys_sendmsg+0x150/0x200 [ 1248.828648] ? __pfx___sys_sendmsg+0x10/0x10 [ 1248.828693] ? __pfx_ksys_write+0x10/0x10 [ 1248.828731] do_syscall_64+0xbf/0x390 [ 1248.828761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.828784] RIP: 0033:0x7f917e36fb19 [ 1248.828801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1248.828822] RSP: 002b:00007f917b8e5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1248.828844] RAX: ffffffffffffffda RBX: 00007f917e482f60 RCX: 00007f917e36fb19 [ 1248.828858] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1248.828871] RBP: 00007f917b8e51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1248.828884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1248.828896] R13: 00007ffe5acfcc8f R14: 00007f917b8e5300 R15: 0000000000022000 [ 1248.828930] [ 1248.877556] FAULT_INJECTION: forcing a failure. [ 1248.877556] name failslab, interval 1, probability 0, space 0, times 0 [ 1248.879206] CPU: 1 UID: 0 PID: 18277 Comm: syz-executor.1 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1248.879252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1248.879274] Call Trace: [ 1248.879286] [ 1248.879300] dump_stack_lvl+0xfa/0x120 [ 1248.879345] should_fail_ex+0x4d7/0x5e0 [ 1248.879394] should_failslab+0xc2/0x120 [ 1248.879442] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 1248.879481] ? __alloc_skb+0x2ab/0x370 [ 1248.879520] ? __alloc_skb+0x2ab/0x370 [ 1248.879547] __alloc_skb+0x2ab/0x370 [ 1248.879577] ? __pfx___alloc_skb+0x10/0x10 [ 1248.879610] ? genl_rcv_msg+0x532/0x7e0 [ 1248.879644] netlink_ack+0x167/0xbf0 [ 1248.879692] netlink_rcv_skb+0x344/0x430 [ 1248.879727] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1248.879751] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1248.879801] ? netlink_deliver_tap+0x1ae/0xce0 [ 1248.879840] genl_rcv+0x28/0x40 [ 1248.879859] netlink_unicast+0x5a7/0x870 [ 1248.879898] ? __pfx_netlink_unicast+0x10/0x10 [ 1248.879946] netlink_sendmsg+0x8a3/0xd80 [ 1248.879993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1248.880043] ____sys_sendmsg+0xa67/0xc20 [ 1248.880070] ? copy_msghdr_from_user+0xfb/0x150 [ 1248.880103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1248.880139] ? lock_acquire+0x15e/0x2f0 [ 1248.880175] ___sys_sendmsg+0x10f/0x1b0 [ 1248.880209] ? __pfx____sys_sendmsg+0x10/0x10 [ 1248.880238] ? perf_trace_lock+0xb5/0x5d0 [ 1248.880275] ? __pfx_perf_trace_lock+0x10/0x10 [ 1248.880303] ? proc_fail_nth_write+0x97/0x220 [ 1248.880338] ? lock_acquire+0x15e/0x2f0 [ 1248.880366] ? __fget_files+0x34/0x3b0 [ 1248.880391] ? find_held_lock+0x2b/0x80 [ 1248.880413] ? __fget_files+0x203/0x3b0 [ 1248.880436] ? lock_release+0xc8/0x290 [ 1248.880470] ? __fget_files+0x20d/0x3b0 [ 1248.880505] __sys_sendmsg+0x150/0x200 [ 1248.880537] ? __pfx___sys_sendmsg+0x10/0x10 [ 1248.880581] ? __pfx_ksys_write+0x10/0x10 [ 1248.880619] do_syscall_64+0xbf/0x390 [ 1248.880649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1248.880672] RIP: 0033:0x7f7432c87b19 [ 1248.880689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1248.880709] RSP: 002b:00007f74301fd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1248.880731] RAX: ffffffffffffffda RBX: 00007f7432d9af60 RCX: 00007f7432c87b19 [ 1248.880745] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1248.880758] RBP: 00007f74301fd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1248.880771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1248.880784] R13: 00007ffdfef66cff R14: 00007f74301fd300 R15: 0000000000022000 [ 1248.880816] 12:03:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf000000, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:03:35 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8904, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:35 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8902, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:35 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x61}, @l2cap_cid_signaling={{0x5d}, [@l2cap_conf_req={{0x4, 0x8, 0x2a}, {0x3f, 0x101, [@l2cap_conf_flushto={0x2, 0x2, 0x135}, @l2cap_conf_flushto={0x2, 0x2, 0x8}, @l2cap_conf_flushto={0x2, 0x2, 0x8c}, @l2cap_conf_flushto={0x2, 0x2, 0x2dde}, @l2cap_conf_mtu={0x1, 0x2, 0x36a}, @l2cap_conf_efs={0x6, 0x10, {0x9, 0x1, 0x7, 0x0, 0x8, 0x4}}]}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0x0, 0xfffa}}, @l2cap_disconn_req={{0x6, 0x7f, 0x4}, {0x6c, 0xfee7}}, @l2cap_conf_rsp={{0x5, 0x0, 0x1b}, {0x4, 0xfff9, 0x3ff, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x2, 0x1, 0x1, 0x3, 0x83ac, 0x40}}]}}]}}, 0x66) 12:03:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x14000000, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:03:45 executing program 0: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}, {@version_9p2000}, {@cache_loose}, {@cache_none}, {@version_u}], [{@appraise}, {@obj_user={'obj_user', 0x3d, '{'}}, {@smackfshat}, {@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x32, 0x64, 0x33, 0x61, 0x0, 0x66, 0x33], 0x2d, [0x31, 0x36, 0x7, 0x61], 0x2d, [0x63, 0x38, 0x31, 0x65], 0x2d, [0x63, 0x38, 0x35, 0x65], 0x2d, [0x61, 0x33, 0x34, 0x37, 0x36, 0x33, 0x37, 0x35]}}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}}) openat(r1, &(0x7f0000000000)='./file0\x00', 0x40000, 0x111) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="560e799f004320"], 0x7) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)=0x4000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) futimesat(r2, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={{0x77359400}, {r3, r4/1000+10000}}) 12:03:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 10) 12:03:45 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8906, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 8) 12:03:45 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x14, r0, 0x1}, 0x14}}, 0x0) 12:03:45 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8903, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:45 executing program 6: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000005, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x80, @any, 0x78}}}, 0xb) [ 1259.544410] FAULT_INJECTION: forcing a failure. [ 1259.544410] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.549170] CPU: 1 UID: 0 PID: 18390 Comm: syz-executor.1 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1259.549201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1259.549213] Call Trace: [ 1259.549220] [ 1259.549229] dump_stack_lvl+0xfa/0x120 [ 1259.549261] should_fail_ex+0x4d7/0x5e0 [ 1259.549293] should_failslab+0xc2/0x120 [ 1259.549322] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 1259.549360] ? __alloc_skb+0x2ab/0x370 [ 1259.549401] ? __alloc_skb+0x2ab/0x370 [ 1259.549428] __alloc_skb+0x2ab/0x370 [ 1259.549458] ? __pfx___alloc_skb+0x10/0x10 [ 1259.549491] ? genl_rcv_msg+0x532/0x7e0 [ 1259.549527] netlink_ack+0x167/0xbf0 [ 1259.549577] netlink_rcv_skb+0x344/0x430 [ 1259.549611] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1259.549637] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1259.549690] ? netlink_deliver_tap+0x1ae/0xce0 [ 1259.549731] genl_rcv+0x28/0x40 [ 1259.549749] netlink_unicast+0x5a7/0x870 [ 1259.549790] ? __pfx_netlink_unicast+0x10/0x10 [ 1259.549842] netlink_sendmsg+0x8a3/0xd80 [ 1259.549884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1259.549936] ____sys_sendmsg+0xa67/0xc20 [ 1259.549964] ? copy_msghdr_from_user+0xfb/0x150 [ 1259.550005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1259.550043] ? lock_acquire+0x15e/0x2f0 [ 1259.550080] ___sys_sendmsg+0x10f/0x1b0 [ 1259.550114] ? __pfx____sys_sendmsg+0x10/0x10 [ 1259.550145] ? perf_trace_lock+0xb5/0x5d0 [ 1259.550182] ? __pfx_perf_trace_lock+0x10/0x10 [ 1259.550215] ? proc_fail_nth_write+0x97/0x220 [ 1259.550250] ? lock_acquire+0x15e/0x2f0 [ 1259.550278] ? __fget_files+0x34/0x3b0 [ 1259.550303] ? find_held_lock+0x2b/0x80 [ 1259.550326] ? __fget_files+0x203/0x3b0 [ 1259.550350] ? lock_release+0xc8/0x290 [ 1259.550385] ? __fget_files+0x20d/0x3b0 [ 1259.550424] __sys_sendmsg+0x150/0x200 [ 1259.550456] ? __pfx___sys_sendmsg+0x10/0x10 [ 1259.550503] ? __pfx_ksys_write+0x10/0x10 [ 1259.550543] do_syscall_64+0xbf/0x390 [ 1259.550573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.550596] RIP: 0033:0x7f7432c87b19 [ 1259.550613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1259.550634] RSP: 002b:00007f74301fd188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1259.550655] RAX: ffffffffffffffda RBX: 00007f7432d9af60 RCX: 00007f7432c87b19 [ 1259.550669] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1259.550682] RBP: 00007f74301fd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1259.550695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1259.550708] R13: 00007ffdfef66cff R14: 00007f74301fd300 R15: 0000000000022000 [ 1259.550744] 12:03:45 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "ab239d998000941f54f7c5f10021cc00", 0x3f}}}, 0x1a) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c86010000c00050800030001000004"], 0x15) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0x2d}, @l2cap_cid_signaling={{0x29}, [@l2cap_disconn_rsp={{0x7, 0x40, 0x4}, {0x2, 0x1}}, @l2cap_disconn_req={{0x6, 0x1, 0x4}, {0x7f, 0x8001}}, @l2cap_move_chan_req={{0xe, 0x9, 0x3}, {0x100, 0x4}}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x6}}, @l2cap_create_chan_rsp={{0xd, 0x4, 0x8}, {0x3, 0x7fff, 0x0, 0x2}}]}}, 0x32) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x41}, 0x2) 12:03:45 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8904, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) [ 1259.637448] 9pnet_fd: Insufficient options for proto=fd 12:03:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9effffff, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) [ 1259.669931] 9pnet_fd: Insufficient options for proto=fd 12:03:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 9) 12:03:45 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8907, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) [ 1259.786680] FAULT_INJECTION: forcing a failure. [ 1259.786680] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.788356] CPU: 0 UID: 0 PID: 18406 Comm: syz-executor.7 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1259.788385] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1259.788398] Call Trace: [ 1259.788406] [ 1259.788414] dump_stack_lvl+0xfa/0x120 [ 1259.788446] should_fail_ex+0x4d7/0x5e0 [ 1259.788477] should_failslab+0xc2/0x120 [ 1259.788507] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 1259.788544] ? __alloc_skb+0x2ab/0x370 [ 1259.788583] ? __alloc_skb+0x2ab/0x370 [ 1259.788610] __alloc_skb+0x2ab/0x370 [ 1259.788642] ? __pfx___alloc_skb+0x10/0x10 [ 1259.788676] ? genl_rcv_msg+0x532/0x7e0 [ 1259.788709] netlink_ack+0x167/0xbf0 [ 1259.788756] netlink_rcv_skb+0x344/0x430 [ 1259.788790] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1259.788815] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1259.788865] ? netlink_deliver_tap+0x1ae/0xce0 [ 1259.788903] genl_rcv+0x28/0x40 12:03:45 executing program 0: syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04a7e9a36b43202507c40c96f3adf5a44b6fd285bee89d8a9624d415a59e5f70ddbd942e417bbfc19a8dcb8e835523f8976a52940a91fa89cce199012adb6a5cbfa5be0b8bab9b79b75b64f395e0539fefc5f6257ec95e2689b1aeee024c9dc55f7c69399237458df7cb549601b83113567af535e5b5557718c421ca426862997b56c7d704c5771089e9b3d15c3edd04316415973ac2fc00"/165], 0x7) 12:03:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 11) [ 1259.788922] netlink_unicast+0x5a7/0x870 [ 1259.788961] ? __pfx_netlink_unicast+0x10/0x10 [ 1259.789016] netlink_sendmsg+0x8a3/0xd80 [ 1259.789057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1259.789106] ____sys_sendmsg+0xa67/0xc20 [ 1259.789132] ? copy_msghdr_from_user+0xfb/0x150 [ 1259.789166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1259.789202] ? lock_acquire+0x15e/0x2f0 [ 1259.789238] ___sys_sendmsg+0x10f/0x1b0 [ 1259.789271] ? __pfx____sys_sendmsg+0x10/0x10 [ 1259.789302] ? perf_trace_lock+0xb5/0x5d0 [ 1259.789338] ? __pfx_perf_trace_lock+0x10/0x10 [ 1259.789367] ? proc_fail_nth_write+0x97/0x220 [ 1259.789400] ? lock_acquire+0x15e/0x2f0 [ 1259.789429] ? __fget_files+0x34/0x3b0 [ 1259.789454] ? find_held_lock+0x2b/0x80 [ 1259.789476] ? __fget_files+0x203/0x3b0 [ 1259.789499] ? lock_release+0xc8/0x290 [ 1259.789533] ? __fget_files+0x20d/0x3b0 [ 1259.789569] __sys_sendmsg+0x150/0x200 [ 1259.789601] ? __pfx___sys_sendmsg+0x10/0x10 [ 1259.789645] ? __pfx_ksys_write+0x10/0x10 [ 1259.789683] do_syscall_64+0xbf/0x390 [ 1259.789712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.789736] RIP: 0033:0x7f917e36fb19 [ 1259.789752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1259.789774] RSP: 002b:00007f917b8e5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1259.789796] RAX: ffffffffffffffda RBX: 00007f917e482f60 RCX: 00007f917e36fb19 [ 1259.789811] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1259.789824] RBP: 00007f917b8e51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1259.789837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1259.789850] R13: 00007ffe5acfcc8f R14: 00007f917b8e5300 R15: 0000000000022000 [ 1259.789883] 12:03:46 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) (fail_nth: 1) 12:03:46 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8906, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xe7030000, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) [ 1259.979753] FAULT_INJECTION: forcing a failure. [ 1259.979753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1259.981626] CPU: 1 UID: 0 PID: 18509 Comm: syz-executor.4 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1259.981656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1259.981669] Call Trace: [ 1259.981676] [ 1259.981684] dump_stack_lvl+0xfa/0x120 [ 1259.981715] should_fail_ex+0x4d7/0x5e0 [ 1259.981746] _copy_from_user+0x30/0xd0 [ 1259.981774] copy_msghdr_from_user+0x88/0x150 [ 1259.981810] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1259.981848] ? __pfx_perf_trace_lock+0x10/0x10 [ 1259.981887] ? lock_acquire+0x15e/0x2f0 [ 1259.981922] ___sys_sendmsg+0xdc/0x1b0 [ 1259.981956] ? __pfx____sys_sendmsg+0x10/0x10 [ 1259.981994] ? perf_trace_lock+0xb5/0x5d0 [ 1259.982030] ? __pfx_perf_trace_lock+0x10/0x10 [ 1259.982059] ? proc_fail_nth_write+0x97/0x220 [ 1259.982093] ? lock_acquire+0x15e/0x2f0 [ 1259.982122] ? __fget_files+0x34/0x3b0 [ 1259.982147] ? find_held_lock+0x2b/0x80 [ 1259.982169] ? __fget_files+0x203/0x3b0 [ 1259.982193] ? lock_release+0xc8/0x290 [ 1259.982228] ? __fget_files+0x20d/0x3b0 [ 1259.982266] __sys_sendmsg+0x150/0x200 [ 1259.982298] ? __pfx___sys_sendmsg+0x10/0x10 [ 1259.982336] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1259.982366] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1259.982397] ? ksys_write+0x1a3/0x240 [ 1259.982422] ? __pfx_ksys_write+0x10/0x10 [ 1259.982461] do_syscall_64+0xbf/0x390 [ 1259.982491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.982514] RIP: 0033:0x7f5fcbb8db19 [ 1259.982531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1259.982553] RSP: 002b:00007f5fc9103188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1259.982574] RAX: ffffffffffffffda RBX: 00007f5fcbca0f60 RCX: 00007f5fcbb8db19 [ 1259.982589] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 1259.982602] RBP: 00007f5fc91031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1259.982616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1259.982628] R13: 00007ffd9df4430f R14: 00007f5fc9103300 R15: 0000000000022000 [ 1259.982664] 12:03:56 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xef000000, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:03:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 10) 12:03:56 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) (fail_nth: 2) 12:03:56 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x2b}, {0x3, [{@none, 0xff, 0x6, "79ea78", 0x8001, 0x1}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x40, "5beaf1", 0x5, 0x40}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xf8, 0x3f, "80da5f", 0x5, 0x7}]}}}, 0x2e) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x3, 0xa7}, @l2cap_cid_signaling={{0xa3}, [@l2cap_create_chan_rsp={{0xd, 0xe, 0x8}, {0x3ff, 0x40, 0x3}}, @l2cap_create_chan_rsp={{0xd, 0x5, 0x8}, {0x27df, 0x0, 0x8000, 0x95}}, @l2cap_create_chan_req={{0xc, 0x81, 0x5}, {0x1, 0x9, 0x66}}, @l2cap_move_chan_cfm={{0x10, 0xf, 0x4}, {0xfff, 0x7ff}}, @l2cap_disconn_req={{0x6, 0xff, 0x4}, {0x0, 0x8}}, @l2cap_info_rsp={{0xb, 0xd8, 0x2f}, {0xff, 0x4867, "6251102e6b8eb5baa46379324a437c3a4ecfd1f43cb9ddb5ff15bece4e71111544738340fff0a0627660e6"}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x5, 0x2}, {0x5}}, @l2cap_info_rsp={{0xb, 0x0, 0x23}, {0x1000, 0x4, "1e27846d81b0e8c0bd84c02bc5cdd35acd15ab025b54e06cf56a6f5c76014c"}}, @l2cap_info_req={{0xa, 0xee, 0x2}, {0xc64}}, @l2cap_conf_req={{0x4, 0x81, 0x8}, {0x9, 0x7fff, [@l2cap_conf_mtu={0x1, 0x2, 0x3}]}}]}}, 0xac) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x67}, "1af769323a2b6b7170dfeb90af99089e759cb1757abc40246586d9dd3c2183434c0ee35ff247022c5727f509ac6ae47f40f6f7c3b996e54ef6f2036b472aeb31856be4ec81b28cae59f5a4b972c7e6e47d92a928f043d42c2f0bab0eae9adb9d1266e78f2d7655"}, 0x6b) 12:03:56 executing program 6: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="840f040000140e"], 0x7) 12:03:56 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8907, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 12) [ 1269.923878] FAULT_INJECTION: forcing a failure. [ 1269.923878] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.924817] CPU: 1 UID: 0 PID: 18533 Comm: syz-executor.4 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1269.924834] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1269.924841] Call Trace: [ 1269.924846] [ 1269.924851] dump_stack_lvl+0xfa/0x120 [ 1269.924871] should_fail_ex+0x4d7/0x5e0 [ 1269.924890] should_failslab+0xc2/0x120 [ 1269.924908] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 1269.924929] ? __alloc_skb+0x2ab/0x370 [ 1269.924952] ? __alloc_skb+0x2ab/0x370 [ 1269.924967] ? __pfx_netlink_insert+0x10/0x10 [ 1269.924990] __alloc_skb+0x2ab/0x370 [ 1269.925006] ? __pfx___alloc_skb+0x10/0x10 [ 1269.925023] ? netlink_autobind.isra.0+0x158/0x370 [ 1269.925049] netlink_alloc_large_skb+0x69/0x150 [ 1269.925069] netlink_sendmsg+0x66d/0xd80 [ 1269.925092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1269.925120] ____sys_sendmsg+0xa67/0xc20 [ 1269.925136] ? copy_msghdr_from_user+0xfb/0x150 [ 1269.925154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1269.925175] ? lock_acquire+0x15e/0x2f0 [ 1269.925196] ___sys_sendmsg+0x10f/0x1b0 [ 1269.925215] ? __pfx____sys_sendmsg+0x10/0x10 [ 1269.925231] ? perf_trace_lock+0xb5/0x5d0 [ 1269.925252] ? __pfx_perf_trace_lock+0x10/0x10 [ 1269.925267] ? proc_fail_nth_write+0x97/0x220 [ 1269.925287] ? lock_acquire+0x15e/0x2f0 [ 1269.925302] ? __fget_files+0x34/0x3b0 [ 1269.925317] ? find_held_lock+0x2b/0x80 [ 1269.925329] ? __fget_files+0x203/0x3b0 [ 1269.925342] ? lock_release+0xc8/0x290 [ 1269.925361] ? __fget_files+0x20d/0x3b0 [ 1269.925381] __sys_sendmsg+0x150/0x200 [ 1269.925399] ? __pfx___sys_sendmsg+0x10/0x10 [ 1269.925424] ? __pfx_ksys_write+0x10/0x10 [ 1269.925446] do_syscall_64+0xbf/0x390 [ 1269.925463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.925476] RIP: 0033:0x7f5fcbb8db19 [ 1269.925485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1269.925498] RSP: 002b:00007f5fc9103188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1269.925509] RAX: ffffffffffffffda RBX: 00007f5fcbca0f60 RCX: 00007f5fcbb8db19 [ 1269.925518] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 1269.925525] RBP: 00007f5fc91031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1269.925532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1269.925539] R13: 00007ffd9df4430f R14: 00007f5fc9103300 R15: 0000000000022000 [ 1269.925559] 12:03:56 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 12:03:56 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) (fail_nth: 3) 12:03:56 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 11) 12:03:56 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x0, 0xa}, "3d68805e3ab872ce27f9"}, 0xe) 12:03:56 executing program 0: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040f0500004320635e40b31fe3506568d111714887b46d3e7c51e14a9a698529249b9712fc633084ff1bfe2ae842eb60a767e460b6759bbbefd1b50af8af3750ec68b0a28bd257b74b1bb245177917aba9b12abf7c9105335f5af041b7db711c51d31ef60e72b3a7791b76565db8a70e8ecbe7092e930f9c64ee8ecef4a4bf9d06c7105916ef657175d55cdb65549c05cff9bd2935d39a9e54a5cc89537712e8f7c182730ab59125ab8619cd13e07808288d1615b75eb6de16a96c6d42a11af4b2134221b929a9a43cbd165c867c5d5f55b56675ba6e6abe"], 0x7) 12:03:56 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8912, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:56 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:03:56 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pipe(&(0x7f00000001c0)) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000080)={0x8b}, &(0x7f00000000c0), 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) 12:03:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 13) 12:03:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) [ 1270.176140] audit: type=1326 audit(1760789036.315:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18561 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17efab1b19 code=0x0 [ 1270.236128] FAULT_INJECTION: forcing a failure. [ 1270.236128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1270.237952] CPU: 0 UID: 0 PID: 18571 Comm: syz-executor.1 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1270.237989] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1270.238003] Call Trace: [ 1270.238011] [ 1270.238020] dump_stack_lvl+0xfa/0x120 [ 1270.238052] should_fail_ex+0x4d7/0x5e0 [ 1270.238085] _copy_to_user+0x32/0xd0 [ 1270.238116] simple_read_from_buffer+0xe0/0x180 [ 1270.238159] proc_fail_nth_read+0x18a/0x240 [ 1270.238193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1270.238225] ? security_file_permission+0x22/0x90 [ 1270.238259] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1270.238290] vfs_read+0x1eb/0xc70 [ 1270.238324] ? __pfx_vfs_read+0x10/0x10 [ 1270.238353] ? lock_release+0xc8/0x290 [ 1270.238391] ? __fget_files+0x20d/0x3b0 [ 1270.238431] ksys_read+0x121/0x240 [ 1270.238457] ? __pfx_ksys_read+0x10/0x10 [ 1270.238495] do_syscall_64+0xbf/0x390 [ 1270.238526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.238551] RIP: 0033:0x7f7432c3a69c [ 1270.238569] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1270.238591] RSP: 002b:00007f74301fd170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1270.238614] RAX: ffffffffffffffda RBX: 000000000000002c RCX: 00007f7432c3a69c [ 1270.238630] RDX: 000000000000000f RSI: 00007f74301fd1e0 RDI: 0000000000000004 [ 1270.238644] RBP: 00007f74301fd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1270.238658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1270.238672] R13: 00007ffdfef66cff R14: 00007f74301fd300 R15: 0000000000022000 [ 1270.238708] [ 1271.005907] audit: type=1326 audit(1760789037.149:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18561 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17efab1b19 code=0x0 12:04:06 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x803}}}, 0x7) 12:04:06 executing program 6: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="09000100"], 0x4) 12:04:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:04:06 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8912, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:04:06 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8916, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:04:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xfffff000, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:04:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 12) 12:04:06 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) (fail_nth: 4) 12:04:06 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f040900f443"], 0x7) 12:04:06 executing program 6: statx(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x6000, 0x100, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) chown(&(0x7f00000009c0)='./file0\x00', r1, 0x0) creat(&(0x7f0000000700)='./file0\x00', 0x140) r2 = fork() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000640)={0x0, 0x0}) syz_open_procfs(r3, &(0x7f00000006c0)='attr/fscreate\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) chown(&(0x7f00000009c0)='./file0\x00', r4, 0x0) syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x10000, 0x4, &(0x7f0000000580)=[{&(0x7f0000000340)="54d5749347b350332e3f1566014ebcbf5175bf209af848f56528737c8a4246d7d6c4cd4385206d81e393263813daa7c98fcf30e00550f75dacd8ff16ac031a9925fbcf372e284b801af09e6a9b1a4f95e983c58d4c51067f8879dea1b57a68fc9edd8de74c04021dfae87515df53711faf7383ee5c336efdfe21fc88380e20688ad4b8423d30fd03944352b72fb02a39a47f8bc3e2167f8e770c3fd17db90abd455328a87919f0e320d66ad9efbf40749b3983dd1d17a103ec1d7472f02db015231e3e8482e7fe03bc307784aca41eee8d34027500d44817140e18d71e9b52c6", 0xe0, 0xe17}, {&(0x7f0000000440)="eb3dfdaf4da7f98e9aa68f7a7056fe104c7dc6f4cdb2aca98a5dd1a95ad119f648eb6170233e23ccda58cf19c8a35d7a2ab4aa78525bf6531daf8fdecfe3872fcf06bb4f94a4744806ff57ed36401cd5b6e60c0cf6", 0x55, 0x100}, {&(0x7f0000000a00)="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", 0x1000, 0x5}, {&(0x7f00000004c0)="a6dabaa93be61083fc775abff127614adf278614cf7183623d5f9267ba35ae71426eda9a964828781e98c0b8128cce5294c0cf854f8741af32b74caf05c8d9c48eee85d8059290e7a3c35e02a2d7b83007a743a8b49e1f39c241a368e580799d90d2fd37aaf27a3ac5d2aef0da2cad620d25b3c598c469710d6cc91036a189edd492f400ed1b7cb9eb51b8f1288fc4a8fffeba8f0908b1015eb17a8d970f476f5445f855789e193804ee7f0fb32a0acd80901c370bb22c5130e3c10884d9a9", 0xbf, 0x80}], 0x180408, &(0x7f0000000600)={[{}, {@uid={'uid', 0x3d, r4}}]}) ptrace(0x10, r2) tkill(r2, 0x1a) fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x0, 0xffffffffffffffff, r0, r1, 0xee01, 0x88}, 0x0, 0x4, 0x79, 0x6, 0x0, r2, 0x1}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0) 12:04:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) [ 1280.601882] loop6: detected capacity change from 0 to 128 12:04:06 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8918, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:04:06 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8916, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:04:06 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) (fail_nth: 5) 12:04:15 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) (fail_nth: 6) 12:04:15 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x7) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c9f06b00670001000e7f03000700050504440008000101810006108d00040081000000ff7f0000008000000202010006100601d40004000000ffffffff0000000001023b46050101040904400700080200080001020600050306000700798b020002010400ff7f3f00010402000300"], 0x70) 12:04:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (fail_nth: 13) 12:04:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffff7f, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:04:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:04:15 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8928, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:04:15 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8918, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:04:15 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x3, 0x4}, {0xff, 0xc5}}}}, 0x11) 12:04:15 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8928, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) [ 1289.575896] FAULT_INJECTION: forcing a failure. [ 1289.575896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1289.576909] CPU: 0 UID: 0 PID: 18863 Comm: syz-executor.4 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1289.576926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1289.576933] Call Trace: [ 1289.576938] [ 1289.576944] dump_stack_lvl+0xfa/0x120 [ 1289.576966] should_fail_ex+0x4d7/0x5e0 [ 1289.576994] _copy_from_iter+0x1dc/0x1660 [ 1289.577012] ? lock_acquire+0x15e/0x2f0 [ 1289.577030] ? __virt_addr_valid+0x1c6/0x5d0 [ 1289.577046] ? find_held_lock+0x2b/0x80 [ 1289.577064] ? __pfx__copy_from_iter+0x10/0x10 [ 1289.577076] ? lock_release+0xc8/0x290 [ 1289.577101] ? __virt_addr_valid+0x100/0x5d0 [ 1289.577117] ? __check_object_size+0x57b/0x880 [ 1289.577140] netlink_sendmsg+0x800/0xd80 [ 1289.577173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1289.577216] ____sys_sendmsg+0xa67/0xc20 [ 1289.577235] ? copy_msghdr_from_user+0xfb/0x150 [ 1289.577255] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1289.577297] ___sys_sendmsg+0x10f/0x1b0 [ 1289.577319] ? __pfx____sys_sendmsg+0x10/0x10 [ 1289.577335] ? perf_trace_lock+0xb5/0x5d0 [ 1289.577362] ? __pfx_perf_trace_lock+0x10/0x10 [ 1289.577378] ? proc_fail_nth_write+0x97/0x220 [ 1289.577403] ? lock_acquire+0x15e/0x2f0 [ 1289.577419] ? __fget_files+0x34/0x3b0 [ 1289.577435] ? find_held_lock+0x2b/0x80 [ 1289.577449] ? __fget_files+0x203/0x3b0 [ 1289.577463] ? lock_release+0xc8/0x290 [ 1289.577489] ? __fget_files+0x20d/0x3b0 [ 1289.577522] __sys_sendmsg+0x150/0x200 [ 1289.577541] ? __pfx___sys_sendmsg+0x10/0x10 [ 1289.577577] ? __pfx_ksys_write+0x10/0x10 [ 1289.577611] do_syscall_64+0xbf/0x390 [ 1289.577631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.577644] RIP: 0033:0x7f5fcbb8db19 [ 1289.577654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1289.577666] RSP: 002b:00007f5fc9103188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1289.577678] RAX: ffffffffffffffda RBX: 00007f5fcbca0f60 RCX: 00007f5fcbb8db19 [ 1289.577687] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 1289.577693] RBP: 00007f5fc91031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1289.577701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1289.577708] R13: 00007ffd9df4430f R14: 00007f5fc9103300 R15: 0000000000022000 [ 1289.577743] [ 1289.608520] FAULT_INJECTION: forcing a failure. [ 1289.608520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1289.609611] CPU: 0 UID: 0 PID: 18895 Comm: syz-executor.7 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1289.609627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1289.609634] Call Trace: [ 1289.609638] [ 1289.609642] dump_stack_lvl+0xfa/0x120 [ 1289.609658] should_fail_ex+0x4d7/0x5e0 [ 1289.609674] _copy_to_user+0x32/0xd0 [ 1289.609691] simple_read_from_buffer+0xe0/0x180 [ 1289.609713] proc_fail_nth_read+0x18a/0x240 [ 1289.609731] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1289.609747] ? security_file_permission+0x22/0x90 [ 1289.609765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1289.609781] vfs_read+0x1eb/0xc70 [ 1289.609799] ? __pfx_vfs_read+0x10/0x10 [ 1289.609814] ? lock_release+0xc8/0x290 [ 1289.609833] ? __fget_files+0x20d/0x3b0 [ 1289.609854] ksys_read+0x121/0x240 [ 1289.609867] ? __pfx_ksys_read+0x10/0x10 [ 1289.609888] do_syscall_64+0xbf/0x390 [ 1289.609903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.609915] RIP: 0033:0x7f917e32269c [ 1289.609924] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1289.609936] RSP: 002b:00007f917b8e5170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1289.609947] RAX: ffffffffffffffda RBX: 000000000000002c RCX: 00007f917e32269c [ 1289.609955] RDX: 000000000000000f RSI: 00007f917b8e51e0 RDI: 0000000000000004 [ 1289.609962] RBP: 00007f917b8e51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1289.609969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1289.609980] R13: 00007ffe5acfcc8f R14: 00007f917b8e5300 R15: 0000000000022000 [ 1289.610000] 12:04:15 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8936, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:04:15 executing program 0: ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000080)={{0x3}, 'port1\x00', 0xc0, 0x10080, 0x1bd, 0x100, 0x3, 0x3, 0x3f, 0x0, 0x7, 0x64}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x1, 0x2043}}}, 0x7) 12:04:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:04:15 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f00000011c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x55}, @l2cap_cid_signaling={{0x51}, [@l2cap_info_rsp={{0xb, 0x8d, 0x7}, {0x81, 0x9, "890793"}}, @l2cap_info_req={{0xa, 0x7, 0x2}, {0x7}}, @l2cap_conn_req={{0x2, 0xff, 0x4}, {0x4, 0x200}}, @l2cap_conn_rsp={{0x3, 0x64, 0x8}, {0x4, 0x9, 0x5, 0x4}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x1, 0x8001}}, @l2cap_disconn_req={{0x6, 0xff, 0x4}, {0x1, 0x2}}, @l2cap_create_chan_req={{0xc, 0x70, 0x5}, {0x0, 0x1a, 0xfb}}, @l2cap_conf_req={{0x4, 0x5, 0x8}, {0xcd4, 0x5, [@l2cap_conf_flushto={0x2, 0x2, 0x4}]}}, @l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0xce6e, 0x20}}]}}, 0x5a) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_stack_internal={{0xfd, 0xbf}, {0x3ff, "3245d702a2862de0f0b4dc9d592e66d44df983e120cf8bbb200eaa2f6b186aa8971fd835b15dd77c8cfba5a9663f35a32b4ae085d04c74a24519313c488e92d8149900253bbfd3c09232eda430f4f5424ff6830cfd0534f596d2345c686e11f09ca67060b8bbad8550bdc36d86e42aaa2007bd8b4fe8c9544180a595f44fb5a78be335c377047c439875d168ef44b628bbf92413fa5e97bba9b7037adfb3f6111f98ff00ab6de15fca6fb79fd05f606ca0e61e66fbdd052dfd7fd3f999"}}}, 0xc2) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x401, 0x137d, 0x0, 0x9}}}, 0xa) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) syz_emit_vhci(&(0x7f0000001240)=@HCI_VENDOR_PKT, 0x2) 12:04:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:04:15 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) (fail_nth: 7) [ 1289.773538] FAULT_INJECTION: forcing a failure. [ 1289.773538] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.774533] CPU: 0 UID: 0 PID: 18975 Comm: syz-executor.4 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1289.774549] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1289.774557] Call Trace: [ 1289.774562] [ 1289.774568] dump_stack_lvl+0xfa/0x120 [ 1289.774591] should_fail_ex+0x4d7/0x5e0 [ 1289.774616] should_failslab+0xc2/0x120 [ 1289.774635] __kmalloc_noprof+0xcd/0x680 [ 1289.774652] ? __pfx_perf_tp_event+0x10/0x10 [ 1289.774671] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1289.774697] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1289.774723] genl_family_rcv_msg_doit+0xab/0x2f0 [ 1289.774741] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1289.774763] ? __pfx_genl_get_cmd+0x10/0x10 [ 1289.774778] ? __pfx_ethnl_default_doit+0x10/0x10 [ 1289.774791] ? __pfx_ethnl_default_start+0x10/0x10 [ 1289.774803] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 1289.774814] ? __pfx_ethnl_default_done+0x10/0x10 [ 1289.774828] ? __radix_tree_lookup+0x1f7/0x290 [ 1289.774862] genl_rcv_msg+0x532/0x7e0 [ 1289.774885] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1289.774901] ? __pfx_ethnl_default_doit+0x10/0x10 [ 1289.774937] netlink_rcv_skb+0x147/0x430 [ 1289.774959] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1289.774981] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1289.775025] ? netlink_deliver_tap+0x1ae/0xce0 [ 1289.775055] genl_rcv+0x28/0x40 [ 1289.775067] netlink_unicast+0x5a7/0x870 [ 1289.775096] ? __pfx_netlink_unicast+0x10/0x10 [ 1289.775138] netlink_sendmsg+0x8a3/0xd80 [ 1289.775168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1289.775211] ____sys_sendmsg+0xa67/0xc20 [ 1289.775230] ? copy_msghdr_from_user+0xfb/0x150 [ 1289.775250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1289.775292] ___sys_sendmsg+0x10f/0x1b0 [ 1289.775314] ? __pfx____sys_sendmsg+0x10/0x10 [ 1289.775331] ? perf_trace_lock+0xb5/0x5d0 [ 1289.775358] ? __pfx_perf_trace_lock+0x10/0x10 [ 1289.775374] ? proc_fail_nth_write+0x97/0x220 [ 1289.775399] ? lock_acquire+0x15e/0x2f0 [ 1289.775416] ? __fget_files+0x34/0x3b0 [ 1289.775432] ? find_held_lock+0x2b/0x80 [ 1289.775446] ? __fget_files+0x203/0x3b0 [ 1289.775460] ? lock_release+0xc8/0x290 [ 1289.775485] ? __fget_files+0x20d/0x3b0 [ 1289.775526] __sys_sendmsg+0x150/0x200 [ 1289.775545] ? __pfx___sys_sendmsg+0x10/0x10 [ 1289.775582] ? __pfx_ksys_write+0x10/0x10 [ 1289.775616] do_syscall_64+0xbf/0x390 [ 1289.775636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.775649] RIP: 0033:0x7f5fcbb8db19 [ 1289.775659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1289.775671] RSP: 002b:00007f5fc9103188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1289.775683] RAX: ffffffffffffffda RBX: 00007f5fcbca0f60 RCX: 00007f5fcbb8db19 [ 1289.775691] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 1289.775698] RBP: 00007f5fc91031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1289.775705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1289.775712] R13: 00007ffd9df4430f R14: 00007f5fc9103300 R15: 0000000000022000 [ 1289.775747] 12:04:25 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8940, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:04:25 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) (fail_nth: 8) 12:04:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:04:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:04:25 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8936, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:04:25 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x7e}, @l2cap_cid_signaling={{0x7a}, [@l2cap_create_chan_rsp={{0xd, 0x3, 0x8}, {0x6, 0x1400, 0xffff, 0x7}}, @l2cap_cmd_rej_unk={{0x1, 0x0, 0x2}, {0x5}}, @l2cap_move_chan_rsp={{0xf, 0x0, 0x4}, {0x1, 0x6db}}, @l2cap_info_rsp={{0xb, 0x81, 0x38}, {0x3f, 0x4, "874bfe5f835c6440ecdcb876722701881bd3dccaf9f97db80098db7b8e0cd1a55a9e626567bdeff00c27b2d8d7bda6bf8dd16038"}}, @l2cap_move_chan_req={{0xe, 0x7, 0x3}, {0x9, 0xfe}}, @l2cap_move_chan_rsp={{0xf, 0x59, 0x4}, {0x4, 0x2}}, @l2cap_create_chan_req={{0xc, 0x18, 0x5}, {0x1000, 0xfff8, 0x3}}, @l2cap_conn_rsp={{0x3, 0x63, 0x8}, {0x4, 0x6, 0x1, 0x9}}]}}, 0x83) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x97}, "c3cac65a338b5143643c4912b8aa052116cd9b7e04cfe3df3c902734a2fcd756932a0ed7d1e7d25edcc7ee7ff9d6596a03275e6e90b9040dfe7f09647250832a0091c368aaf2d26658153480c4e1fc1e726fde97e67723c603ad9152d414f530b7b89ca62686148c540f194b76108afc5654b2caa0b53bbf31bdf0ba0c9a655fd0bf64e7ffe85ed9bbcc824309be259aa9a8c59b847597"}, 0x9b) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000200)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 12:04:25 executing program 6: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x100100, 0x0) ioctl$FIONCLEX(r0, 0x5450) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r2, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) signalfd(r1, &(0x7f0000000080)={[0x7]}, 0x8) 12:04:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:04:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:04:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:04:25 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) (fail_nth: 9) 12:04:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:04:25 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x1, 0x411}}}, 0x7) 12:04:25 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8940, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) [ 1299.496848] FAULT_INJECTION: forcing a failure. [ 1299.496848] name failslab, interval 1, probability 0, space 0, times 0 [ 1299.497837] CPU: 0 UID: 0 PID: 19124 Comm: syz-executor.4 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1299.497854] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1299.497861] Call Trace: [ 1299.497866] [ 1299.497872] dump_stack_lvl+0xfa/0x120 [ 1299.497894] should_fail_ex+0x4d7/0x5e0 [ 1299.497918] should_failslab+0xc2/0x120 [ 1299.497937] __kmalloc_noprof+0xcd/0x680 [ 1299.497960] ? ethnl_default_doit+0x1b6/0xd60 [ 1299.497978] ? kasan_save_track+0x14/0x30 [ 1299.497994] ? __kasan_kmalloc+0x7f/0x90 [ 1299.498016] ethnl_default_doit+0x1b6/0xd60 [ 1299.498031] ? __nla_parse+0x42/0x60 [ 1299.498048] ? __pfx_ethnl_default_doit+0x10/0x10 [ 1299.498065] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1299.498079] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1299.498105] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1299.498122] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1299.498158] ? __radix_tree_lookup+0x1f7/0x290 [ 1299.498192] genl_rcv_msg+0x532/0x7e0 [ 1299.498214] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1299.498231] ? __pfx_ethnl_default_doit+0x10/0x10 [ 1299.498267] netlink_rcv_skb+0x147/0x430 [ 1299.498289] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1299.498307] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1299.498351] ? netlink_deliver_tap+0x1ae/0xce0 [ 1299.498380] genl_rcv+0x28/0x40 [ 1299.498392] netlink_unicast+0x5a7/0x870 [ 1299.498421] ? __pfx_netlink_unicast+0x10/0x10 [ 1299.498464] netlink_sendmsg+0x8a3/0xd80 [ 1299.498495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1299.498538] ____sys_sendmsg+0xa67/0xc20 [ 1299.498556] ? copy_msghdr_from_user+0xfb/0x150 [ 1299.498576] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1299.498620] ___sys_sendmsg+0x10f/0x1b0 [ 1299.498642] ? __pfx____sys_sendmsg+0x10/0x10 [ 1299.498658] ? perf_trace_lock+0xb5/0x5d0 [ 1299.498686] ? __pfx_perf_trace_lock+0x10/0x10 [ 1299.498701] ? proc_fail_nth_write+0x97/0x220 [ 1299.498726] ? lock_acquire+0x15e/0x2f0 [ 1299.498742] ? __fget_files+0x34/0x3b0 [ 1299.498758] ? find_held_lock+0x2b/0x80 [ 1299.498772] ? __fget_files+0x203/0x3b0 [ 1299.498786] ? lock_release+0xc8/0x290 [ 1299.498811] ? __fget_files+0x20d/0x3b0 [ 1299.498844] __sys_sendmsg+0x150/0x200 [ 1299.498863] ? __pfx___sys_sendmsg+0x10/0x10 [ 1299.498901] ? __pfx_ksys_write+0x10/0x10 [ 1299.498934] do_syscall_64+0xbf/0x390 [ 1299.498954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.498967] RIP: 0033:0x7f5fcbb8db19 [ 1299.498978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1299.498990] RSP: 002b:00007f5fc9103188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1299.499002] RAX: ffffffffffffffda RBX: 00007f5fcbca0f60 RCX: 00007f5fcbb8db19 [ 1299.499010] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 1299.499017] RBP: 00007f5fc91031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1299.499024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1299.499031] R13: 00007ffd9df4430f R14: 00007f5fc9103300 R15: 0000000000022000 [ 1299.499066] 12:04:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:04:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:04:25 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8941, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:04:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x7, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:04:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:04:25 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 12:04:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0xf, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:04:36 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) (fail_nth: 10) 12:04:36 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x894c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:04:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:04:36 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:04:36 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000100)={{0x3f, 0x6}, 0x100, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000001640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001600)={&(0x7f0000001740)=ANY=[@ANYBLOB="78030000", @ANYRES16=r3, @ANYBLOB="000129bd7000fedbdf250f000000040067000400440004001e01040044001800490005ac0f0001ac0f0009ac0f000cac0f000dac0f0010004c0003ac0f000aac0f0009ac0f000400e2000a0034000101010101010000c8025a8034000080050004000000000027000200102d21262e2a34562847023635522c220710150532194619222c244155502c08302a0f006c0002800c000200291d1e10513d483b2000010036091248062405020401300903061818030c1805600148090305300c0500040002000000130001006002364816122418001b0916096005001e00010024481b1b03241b6c69163016000c6c163602187c12300303481b0000d4000380460002002b48531b3b062a1248134e1b46271c1414470f42352420071814141d383023382a282600473f400813451552510e26083505343830265103200e050c434019204147000014000300fc00ff013f000200ff0700000000c0ff050004000000000005000400010000000500040000000000460002004657072e362a414d173d3a12142d3f0a0b3e315539174e020079471933534b0c13492f56375141484e3a133c2e2a0419183a3e401110284a23442e560233512b53540000140003000200ffff4d00294f0500010406000f004800018014000300020000088000000007000700f9ff02002000020003514d3b201f1612393e062e292a132c4101292e04502547311e2554050002003b0000000500040001000000a400008014000300ff0f9b0409000800050000000300018005000400010000000500040001000000140003007ffff8ff02000900fffe610000000300170002003148460b3e281637192929262413543d3a255300330002001c0c224d2e57282938281e3650052e51444920294639192f2a1b4332361651144e3c34500911524517033d570039430005000400010000001400030007004a76ff7fff03040000001f00f9ff300000801400030001800400010009002bfa0400d90e930018000100120c046c0318606c0c066c660b36484f0504001234000280140003000400060008000200070000040300060014000300060000006bb501000600e339be26060005000400000000000800a5000100000008002201da010000050018012500000005001901080000000800270003000000050019010c00000008009f000700000008009f000200000008ec9f00050000000c001b80050001000d0000008c3365e7d0325f9548aadbf5240a51bfe25b054eee104d33e6d6aaeeb071750dd2d466a5fd6dbd65fe0b819ca73b680f10a9e7ea6d5c16cf2369aca8d4e2f8df5c80f0c712eccd0647f0312e675dc379da4ab8789b0ecc713b1c9e00f3070d54fa"], 0x378}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x48000) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000000240)={0x0, 0x80000001}) syz_emit_vhci(&(0x7f0000001680)=ANY=[@ANYBLOB="02c8603a003600010004b123002000fcff0202ff000409010180ff0f010004000702f8ff0102040001020400020200000c030500080003000401060200090032a46a47103ad0dfb3908e788e6cf2f13f6617026649e277113614c2ae4d73504dff21e9545b9957c049c0944c4d638f33f5a62fa4a3f71dfec885d9cfb690c2d2f328f26b959c9153e1"], 0x3f) 12:04:36 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8941, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:04:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:04:36 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x34}, "7e1cc03abf7b8686274c194a05e619aa817c1622c5a56ad11df0d3b7e0ce1970a3f0fc12cd88f876fd8f6e4639fd500328507464"}, 0x38) 12:04:36 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8982, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:04:36 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x41b}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x7f, 0xc9, 0x7fff}}}, 0x8) 12:04:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x22, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:04:36 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) (fail_nth: 11) 12:04:36 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:04:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) [ 1310.429906] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. 12:04:36 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x9, 0xc9, @none, 0x2, 0x1, 0x1, 0x1, 0x16c0, 0x3d}}}, 0x14) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x90}, "ecb2108cc497bb9e6f9392e464a61580563a59f6284f62960ab3917bf1ac982a275993ff597ce8a30dab3999e75b78e0a82958e9919e3e213297a7839cbaf0779e52cbe018f241d79ba146c84a73c17b908dd8ef48c2c6b62777ec05aa62c3dc9e49a47109e73d9200af6864e551092f2b8e2f4222f6bd839d3f16f4beb4b4c319fb872ea63ee7d321b9e21e2cdc3047"}, 0x94) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x39}, {0x4, [{@any, 0x1, 0x0, 0x3, "861a8f", 0xea}, {@none, 0x81, 0x1, 0x5, "bb689c", 0xfff}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1, 0x2, 0x9, "b50b0e", 0x6b8c}, {@none, 0x5, 0x1, 0x5, "9c4e3b", 0x1}]}}}, 0x3c) [ 1310.484753] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1310.509282] FAULT_INJECTION: forcing a failure. [ 1310.509282] name failslab, interval 1, probability 0, space 0, times 0 [ 1310.511296] CPU: 0 UID: 0 PID: 19356 Comm: syz-executor.4 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1310.511329] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1310.511342] Call Trace: [ 1310.511352] [ 1310.511363] dump_stack_lvl+0xfa/0x120 [ 1310.511402] should_fail_ex+0x4d7/0x5e0 [ 1310.511447] should_failslab+0xc2/0x120 [ 1310.511484] __kmalloc_noprof+0xcd/0x680 [ 1310.511530] ? ethnl_default_doit+0x239/0xd60 [ 1310.511561] ? __kasan_kmalloc+0x7f/0x90 [ 1310.511605] ethnl_default_doit+0x239/0xd60 [ 1310.511635] ? __nla_parse+0x42/0x60 [ 1310.511669] ? __pfx_ethnl_default_doit+0x10/0x10 [ 1310.511704] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1310.511732] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1310.511795] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1310.511830] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1310.511902] ? __radix_tree_lookup+0x1f7/0x290 [ 1310.511970] genl_rcv_msg+0x532/0x7e0 [ 1310.512020] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1310.512054] ? __pfx_ethnl_default_doit+0x10/0x10 [ 1310.512126] netlink_rcv_skb+0x147/0x430 [ 1310.512170] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1310.512206] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1310.512294] ? netlink_deliver_tap+0x1ae/0xce0 [ 1310.512354] genl_rcv+0x28/0x40 [ 1310.512377] netlink_unicast+0x5a7/0x870 [ 1310.512436] ? __pfx_netlink_unicast+0x10/0x10 [ 1310.512524] netlink_sendmsg+0x8a3/0xd80 [ 1310.512587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1310.512673] ____sys_sendmsg+0xa67/0xc20 [ 1310.512711] ? copy_msghdr_from_user+0xfb/0x150 [ 1310.512749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1310.512836] ___sys_sendmsg+0x10f/0x1b0 [ 1310.512880] ? __pfx____sys_sendmsg+0x10/0x10 [ 1310.512913] ? perf_trace_lock+0xb5/0x5d0 [ 1310.512966] ? __pfx_perf_trace_lock+0x10/0x10 [ 1310.512997] ? proc_fail_nth_write+0x97/0x220 [ 1310.513045] ? lock_acquire+0x15e/0x2f0 [ 1310.513079] ? __fget_files+0x34/0x3b0 [ 1310.513109] ? find_held_lock+0x2b/0x80 [ 1310.513137] ? __fget_files+0x203/0x3b0 [ 1310.513165] ? lock_release+0xc8/0x290 [ 1310.513216] ? __fget_files+0x20d/0x3b0 [ 1310.513282] __sys_sendmsg+0x150/0x200 [ 1310.513320] ? __pfx___sys_sendmsg+0x10/0x10 [ 1310.513394] ? __pfx_ksys_write+0x10/0x10 [ 1310.513460] do_syscall_64+0xbf/0x390 [ 1310.513499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.513525] RIP: 0033:0x7f5fcbb8db19 [ 1310.513545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1310.513568] RSP: 002b:00007f5fc9103188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1310.513590] RAX: ffffffffffffffda RBX: 00007f5fcbca0f60 RCX: 00007f5fcbb8db19 [ 1310.513606] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 1310.513621] RBP: 00007f5fc91031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1310.513635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1310.513649] R13: 00007ffd9df4430f R14: 00007f5fc9103300 R15: 0000000000022000 [ 1310.513720] 12:04:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:04:48 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x894c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:04:48 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc2}, "47964f3aa2eaf59763f847484bf6a7a1aec42ae33f6ada4301d02a4b34660a86e5a6046e89f06ef75f275aeffa4eaab7cb7d49b1d6c851bfd53f4f7f76fd1b88ff37300f2ab8683052626fd822909983055778169cb92365522e6acfadd175ed8e74901d52ca90b0e74e0cafdbafc450807e9d248699976b21436c014f4a63b2971cfe75c20638f84a817710a74a151645d2fc3b8bdeb6fdd96b1f9707a02f4baa0f10871b626ce9f79acea573f5d7d78f789259d835135fc51e4b0ffba65b618bf8"}, 0xc6) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x20}}}, 0xa) syz_emit_vhci(&(0x7f00000001c0)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 12:04:48 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) (fail_nth: 12) 12:04:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:04:48 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8983, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:04:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x25, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:04:48 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0), 0x6e, &(0x7f0000000240)=[{&(0x7f0000000140)=""/212, 0xd4}], 0x1, &(0x7f0000000280)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}, 0x40000001) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000480)={0xfffffffffffffffa, 0x8, '\x00', 0x1, &(0x7f0000000440)=[0x0]}) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80100) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x2, 0x8, 0x2}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) [ 1322.229309] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1322.259806] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.5'. 12:04:48 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x128}, @l2cap_cid_signaling={{0x124}, [@l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x4, 0x9, 0x6}}, @l2cap_info_rsp={{0xb, 0x1, 0xd0}, {0x3, 0x5, "1d2fec4e12db18f55ca49548426f6583a2552e666eff7cf1111a2e15f3c63c6d43f0ecf4f8f9c8a6b1fa531dbee928bcbd1c14d149625092d79192698fe1efc2be338c3e1116fd2960cb81c774dbe8300a28eb10d0dc9eabae948ef8bc96614ff94fa8672348b58ad19e9796ae9a2c9d457e6d9e421694a90415af353dabd406f0c371f4b2c905996dbf192a8a99d485722e435d6a76232c1c001b3b518a3162e29dafcb10a5536595b0a20fb1dc7f103b3a874f2c0ccf16768267980e23af6ab33b339ec176400a70892ff4"}}, @l2cap_conf_req={{0x4, 0x4, 0x3d}, {0xfaa, 0x71, [@l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x17e}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_ews={0x7, 0x2, 0x5}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x1}, @l2cap_conf_efs={0x6, 0x10, {0x4a, 0x1, 0x2, 0x40, 0x4, 0x6}}, @l2cap_conf_efs={0x6, 0x10, {0x88, 0x0, 0x14, 0x9, 0x10001}}]}}, @l2cap_info_req={{0xa, 0x1, 0x2}, {0x3}}]}}, 0x12d) 12:04:48 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8982, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:04:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x14, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:04:58 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x8983, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:04:58 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x89a0, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:04:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:04:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x180, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:04:58 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) (fail_nth: 13) 12:04:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x7, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:04:58 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 12:04:58 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x65}, "892e6e858986dc21873e101f22bf332a70c7edeec1df25f04b1489470afe33f346cfe03129f0e322afe58e3abdf17287095e97c401ca46079eb11366efd69905a04890289f4a250f8ad1000d40738e84d845ab814d0179ce84decdee155d89e7b7fa08a8a3"}, 0x69) [ 1332.183688] FAULT_INJECTION: forcing a failure. [ 1332.183688] name failslab, interval 1, probability 0, space 0, times 0 [ 1332.184687] CPU: 0 UID: 0 PID: 19605 Comm: syz-executor.4 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1332.184704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1332.184711] Call Trace: [ 1332.184717] [ 1332.184723] dump_stack_lvl+0xfa/0x120 [ 1332.184745] should_fail_ex+0x4d7/0x5e0 [ 1332.184770] should_failslab+0xc2/0x120 [ 1332.184789] kmem_cache_alloc_node_noprof+0x87/0x6b0 [ 1332.184814] ? __alloc_skb+0x2ab/0x370 [ 1332.184844] ? __alloc_skb+0x2ab/0x370 [ 1332.184859] __alloc_skb+0x2ab/0x370 [ 1332.184879] ? __pfx___alloc_skb+0x10/0x10 [ 1332.184894] ? __pfx___mutex_lock+0x10/0x10 [ 1332.184911] ? __pfx_netdev_run_todo+0x10/0x10 [ 1332.184933] ? __asan_memcpy+0x3d/0x60 [ 1332.184959] ethnl_reply_init+0x45/0x210 [ 1332.184987] ethnl_default_doit+0x5d7/0xd60 [ 1332.185002] ? __nla_parse+0x42/0x60 [ 1332.185019] ? __pfx_ethnl_default_doit+0x10/0x10 [ 1332.185037] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290 [ 1332.185051] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1332.185076] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1332.185094] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1332.185130] ? __radix_tree_lookup+0x1f7/0x290 [ 1332.185164] genl_rcv_msg+0x532/0x7e0 [ 1332.185187] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1332.185204] ? __pfx_ethnl_default_doit+0x10/0x10 [ 1332.185240] netlink_rcv_skb+0x147/0x430 [ 1332.185262] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1332.185280] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1332.185323] ? netlink_deliver_tap+0x1ae/0xce0 [ 1332.185353] genl_rcv+0x28/0x40 [ 1332.185364] netlink_unicast+0x5a7/0x870 [ 1332.185393] ? __pfx_netlink_unicast+0x10/0x10 [ 1332.185436] netlink_sendmsg+0x8a3/0xd80 [ 1332.185467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1332.185510] ____sys_sendmsg+0xa67/0xc20 [ 1332.185528] ? copy_msghdr_from_user+0xfb/0x150 [ 1332.185548] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1332.185591] ___sys_sendmsg+0x10f/0x1b0 [ 1332.185613] ? __pfx____sys_sendmsg+0x10/0x10 [ 1332.185629] ? perf_trace_lock+0xb5/0x5d0 [ 1332.185657] ? __pfx_perf_trace_lock+0x10/0x10 [ 1332.185673] ? proc_fail_nth_write+0x97/0x220 [ 1332.185698] ? lock_acquire+0x15e/0x2f0 [ 1332.185715] ? __fget_files+0x34/0x3b0 [ 1332.185730] ? find_held_lock+0x2b/0x80 [ 1332.185744] ? __fget_files+0x203/0x3b0 [ 1332.185759] ? lock_release+0xc8/0x290 [ 1332.185784] ? __fget_files+0x20d/0x3b0 [ 1332.185817] __sys_sendmsg+0x150/0x200 [ 1332.185836] ? __pfx___sys_sendmsg+0x10/0x10 [ 1332.185873] ? __pfx_ksys_write+0x10/0x10 [ 1332.185906] do_syscall_64+0xbf/0x390 [ 1332.185925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.185938] RIP: 0033:0x7f5fcbb8db19 [ 1332.185948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1332.185960] RSP: 002b:00007f5fc9103188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1332.185971] RAX: ffffffffffffffda RBX: 00007f5fcbca0f60 RCX: 00007f5fcbb8db19 [ 1332.185980] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000004 [ 1332.185987] RBP: 00007f5fc91031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1332.185994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1332.186001] R13: 00007ffd9df4430f R14: 00007f5fc9103300 R15: 0000000000022000 [ 1332.186037] 12:04:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x255, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:04:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x33fe0, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:04:58 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x89a0, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:04:58 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x0, 0x407}}}, 0xffffff19) 12:04:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:04:58 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) (fail_nth: 14) 12:04:58 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x89a3, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:04:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x8, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:04:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0xfffffdef, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:04:58 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x89a3, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:04:58 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x8ef}, {0x9, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0xff, '\r\r\t', 0xc6b5, 0x8, "75b95bc44a53afb8bd111c3670446c0896274a83edcb67c342891e1e70f0b1ce59b13074a2bcdcb8c552bc998dcbb424a46aaef2db221c6f555a5cbdd2c45610956c5cbf73d3eeb463139ab7fdc8ff32e37250478a530a0af4c5fb90bd21ea056cd55f800027a7d93515a90ab8093a3908c503cc762866ccb82afa8fc45e1a3fc08787a48433a0f37c1e03021baeceb1c95effbde8a809e8dcb95797220a8307481cdb1e4eb750d225307dd521cd2e4b4052e24a62c7e8dedf6241341ba6edca48558b6936268609d5648d6b541285aff83a49c3936d9da10d172dd7a481401fd17af4477415511ab33e8837a9067b90"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x80}, 0xda, 0x1, "b4aef5", 0x81, 0x9, "64e7c7202bba154503f9473d4ce660660fb8b5dc12f53b5a007ad75454f9b63b15c2d18515359cb412f808f167ef6b91e53a74d09ec2302c74fcefbf7efdc5ea2ffd23e7c0990189e6461e62e3829c4e9d30a41ce709517cd106dc62b3a09ea6531228d3f9136d09f48dbdbe242d291c7fd642c7484c0298a0e2b1906e5ca4a27d8ddf1bfa9a7f742e624f534a0403548438aa8cd4139e7ea9424a97608e8ce826c059335e0749626647d390356e67653f62bc5ab70ded0788b5dafe1475cab5897eb6699bcdb9f76d3d09624ececafefb4f87890f7bddc3ec7c50d3ac151b7e858fd65a1ae27f08ea7f76be1d7d486a"}, {@none, 0xff, 0x80, "8332d4", 0x3ff, 0x0, "edc8bf97b6b40d10617fe3a7da98cfbe565e06bee3f914b506d049448eabd087b439de921f781dccb16ec4ba79086063a3067167137b8bf1bf509f773b0ee1209f418fef56c14b0cd3118625250cbb6d0d2056eb40ba81f073c2b81a78f35a3fe1dedcf79d7e1bfbd0afda2e798785d9529b99d7ddb95e5813b69f45d16f3f597a55de4ede0cd0bbb9b65a5d3fc9ffe5415a959240e8fdfeaa69f27096a335f3dfc9936c66cd4c2edd703a5ced9862f503c1d69a779574ab0de97af19093cdb7a52c851b642bb9b556e5134b2a8822951e590a905897b9e23b34a0a5d2459853a65d04a55a3462524c465f9dfce0899f"}, {@any, 0x81, 0x8, "aef795", 0x9, 0x6, "a3f508b56e08df6930a9548477d1fe5b192106685dda96f03473e92b9325f264d888a23c83034e0e00de2e7ed3e9d8fba3bd0e58c7259d6958e3b82bf733c3c11772c8e7c06d4a049bc44554115e6d868c1b7423e9334b269bbbfcc7c816b2d1b3081d1066f4119352911404c117ca9a0a6dc04d22395b08092e5a48d2349d0bbc9f3c7d6115784f67f316da1b99ddfa8e662f8a5e419ee3bcba03da0d1c920f3cf7481bb2c3a7d96fc1daec9b94678609183838ca09229c1035575d9e58d79632105a97c0271f9ad95a1b05a930174f7f0c5a40aa2e1e2ed641fb2cd2942f32bb6c58acd9bb0cefbd9aa926dd7ccd04"}, {@none, 0x4, 0x1f, "ca58eb", 0x77, 0xff, "4d9e448f3e7e84bc2d1d25a55824e719d99eb1dcc278bd16f91ef260e9b1a23acf4974fec353dbfdfe71c81775a1e6393d4640412cb732dec825319d5f38bf8bf2276090a75824ff11ac26c538b93806554b72d329a816443a50c1cc100ca55da13bbc56eff9138ab01e4283c87c91d2fa6d11c7be8a4cd793fbedabe74a70aceddd3f7d0d516c399a73c6276141bee9b5fb7450e049825865ad2ec6932795866a7bd826f7aa6126f56b9189c6ca0eef0ce36bd3d1a2e6dcfa68480efde32946d58c8bb0760e062c6a9413d25f066fe14e654eb4d53c6e072cd5ec641f432bd268ae4c21404621d93beb771a603a6a66"}, {@none, 0x9, 0x0, "97b578", 0x1, 0x8, "ad3f1034d8c2e3bc9e9acfd61c750f585946fdf72cb22d450ee068d2f1784b6b39c087ae83c46fd40749156b08385718d98775444728ec3ed5f9b0a17969ea86ed1e35866280faddce9986c255a866309d96361452275bb3d0aec0984bb8247c55f202717ee54478405a3e081469df9d156da077348f09c6d8ec5bf4a4bb4c26e4deaa0b871eb6c500eb575507fedfc7d886cec74a052a1e5e832b701d136174f6dd45f9498e878c3f1a093db3b70a6f53a19164185ccc318d0d2daaf00a55b01b429aefe6e61109edc6ee5e6d1f806e2f6b3c00fd487eefadf674202bc130aff981b15268cab0c9ffe5e820909a15d8"}, {@none, 0xa8, 0x35, "e889f3", 0x34fe, 0x80, "67ccb8feac5d703c2bee7530b2990ada1fc9ed57908c227248b58e8c10a3b1cabb52a0538abe298abefd6c409d3395519f057eed832e31164bf86fd5d401c5891b4d1e42ef72cd0b88c27d4feef1d93876486bd79169aa856506953d40c75a433c94353b068532f712b653dab57acf4af3901e3abccaede9851c9d36feaf7e476c580f5667b424a5ff91bfd41d9578fd48069a70aa6ed52e850383a39a854bde7c382e94eed2f98d37cf32635f866e93f0185a053eebf7009765b346dcc4258f173e3228f8e1e6a8d0702a26b6f9bccecff778cc85d9eff643211738bce4a3d7c1a9460e15fb2c9f9fddbdb7cc58ea73"}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x7f, "021fe4", 0x1, 0x1, "824ad55b6e1a479860e52c1a65ebc6937b043cd38220f4f368c75ffc3c158d065481043855b2e5d9aec32f3c1b9b2fe3193adf565b2d4797b7be6424eb233ab7fecb275186b9aa011c36e719de1b5c4fddd4e345edb51802af9c618c51ff3e745d9e0b7e88fb9b02a1b9a444a33298a4a751db08baa3ffb7f88c4de1f21a64fecde4c23b36a611fc794948ab099fe528cfea2a2088740188defd8c38ba4042fdce6f0efbd84666f2694d46804c0cfec18a11dcdf42713b659289257a6e943a26d8a9bf2e9e38752be0181b52fb6796e0e74ee6d3891a61c74470e2f2cae7f9c5206b7f413042d614998978808f3b8e3c"}, {@any, 0x1, 0x2, "570171", 0x401, 0x9, "815a3243570dc18212492ae41102867b61a95318eb9c42947492f8b5175159e7af117be237bd839b6fcc5614f04732093bf5b6eebdaebbe12db4da2531dde9d098283af716c7b76c440cf655b10636abe971501d99d379c6bbb37a58b42ca489fc9de75c09ebc999ce98f258aac390b5c7d6be9cd3778f77017c82a89bff350ad7ccd96d84b9859502d5b1bf9016e0314fd3545031b5c6b5c9e32139216ef647c72fc582c54eb2fce1c2b440d79f86c9c9ae7497f87c7870eae4daf67d8ac5fbee4b7da951ed73560ba3de6122ed6c1104b515d3e9572cb5e61322ed1a205ed5cbbeada34e7393a15d822d7991da9479"}]}}}, 0x8f2) 12:04:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x25, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:04:58 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) (fail_nth: 15) 12:05:08 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:05:08 executing program 0: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040f0409004320ac7b8ab6e58b45f014a15ee7cbc7896266e5bbf7efa60895cb84b949f646b3e9b80210ec136d1633f8f6bf27c2459e75203d0541177e607494f83b9baa3c4f793ace708e4896bff5e92500d8121432d6c1abf9aadd6d6304d3affe0183db9d177c3dbaa751572e9e956667ebaaa87a938303a75c161d6b163b30197e28ee842a8a43bc012299060079bea7af94b013072e6ed7c90f4a7ba10be016727a75c5367b0ea47cbced7adb3791cafe5acb438578bf596e87ccee7e538cecc4e62df0d21042ff740881cc1c478f289bad749460241600bcabb2c26fba92a0c6d819d664097641182d"], 0x7) 12:05:08 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x40049409, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:05:08 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x40049409, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:05:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:05:08 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) (fail_nth: 16) 12:05:08 executing program 6: ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000080)={'wg2\x00', 0x4}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x40, 0x4}, {0x7, 0x81}}}}, 0x11) 12:05:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3e7, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:05:08 executing program 0: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000140)=""/188, &(0x7f0000000000)=0xbc) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="7805f097e09ae74dbe11a282ffb7ab98b7606ac7bab2b5938333f2d033f5990db01632d49311ef201fb0a64de952b6c284ea66595d7d947a872453c12a81f6327d5211c614d048cf3ae5980593800c39311d4686b9af662d9ee939d409b2f4f1c9d99038e1a1ed6e52e3217c29b9db4fdb1396de6ee3be3334e24b4d02034df2d67b34699031e1891cc011f9df0f0fa2f2ea375e8e55b4f556f2c0f8a5f78cd07a70d60a0d306952412789e3ce43b7aa11e2de185734ddf24a0d090352877e6767625c34fbb823dd23083708ce7f"], 0x8) 12:05:08 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:05:08 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x40086602, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:05:08 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x40086602, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:05:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x14, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:05:18 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x40087602, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:05:18 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000080)={0xae0, 0x9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) 12:05:18 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) (fail_nth: 17) 12:05:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x2, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:05:18 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x40087602, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:05:18 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x27}}, 0x4) 12:05:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:05:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x3, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:05:18 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04090409004320"], 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x1}}}, 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000001100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "0103de528a72fe6a43e74c0ca571d30e43d0c9336b9a09134222c4ae9275f58162d74630612e9c9b0e709151a0dc4782284809e0d8240fa0ac542f97a6123556e6418272b8c837cd5292a77b63031c417fffbaf20b9bf60cf13cf6e4ccf1884ad212cb8c070ccd131b95a20446010853d708da78cfaeb199568e368073d4a3e9857a344717402f2e12b7e7c8c86b9fce072a28cde515b2638dec0f89874a010ed8c5dcecb7702a7efe30c34c9131deea948ac2b14f99f0748e76981d94da04a304da558cbfa3af587db9f22c3ca358ec1fae5d5db699657509616258e460e76c3de74088047545627a8b9368a809023c21cf0ad8196fbf4ddf17a22971525f9411770bcab9a2578408fb7ded4e7f1e75a8f8f266289f93e66e7b55be5349c03a07a808a1a4882efad1d127215a7c89a4b854501c8258601aee1f36a5a44d65a07b07571882cb0f46ff3aa9e38dfd05f64f8c380e4333390ed85fc311cda42aa5254e42729c1d7dd4244970d4d716ff924d259949f46e6f2a47174dc6e26a0a3f5ca687c21a5cb42de6d592faa9d5d1bd07211c1fa80787dc15f025192f319952aa863b3157a9676c65ed18501a7b461712e3f1cc4eaa3266e4f11c467e412023d35b72737d68f57530dccd228f17c5eed8ff706644006f5472d6d958db73cae82d9fd6616d97269ad9fa314def2c7df993961b7dbfb241818cb96cae14be0b7b0fb2fff3224114e32e392792c8bbfabc5623b08a2550f58fa6ec68e660a29a3852f9755aad57223b9a603316bc86b29ec89bbbb40e75cad8ec4b0adf40752130f5b61ee4c8385809d9595e5422ed11daa8f8ce23f4d26a79920b000d41f09906fa2edec281429e7cf5246b6983a1b26e75ef82ae0da530c0f7e9f70349cc9862699356fb7791097e9ad869eea22aec3387658660e729fd6182156d390ddf2bb8ff8994d4e8e0d5d96fbc6b881d4b721951657847cc4eb559a85cd2e542a3c51929de6ff8d91bbd4efb87f663488695f82badd441222f024b04665c41f632004a680c4788a7742f810b599fa2c47b41d113556cbc771ffbb386e984b998f13a55bf7082d3edea303fb15005fee0f2a8a005d1634f8d13b6a359c657bb6ccd5eff96acb0702ed5a872489918a48ab98eb9e7b0562bf312cd2b9cfcb91776a3f2ef850923bf2a54d7446480b4b3e943b243ff008f3753888537217c82cfa782822351b3c287c64c5773750ff94e8c606542ffec95066214280cf84ae2beb243dcb9177e9126373ba001911e0b517fd37151b6baafd853d7abf79ed17e0d3b07cb683bdf7e082bf670fc9c2bf9fa3613d67b443798d80722eead3832ce392d47f0986794d715644922d9a21830a9fb4135123fc227646648450565484dd8cd52c6f19fb26fee9ed65ce92096610616c8f0076c852cf08f2e5044713072ced35dceec574e86c465df8b61a19e3a9e34df084d38b03dd07d20501531ce96834001167cfb7745e1b88389e67f27e8e6d231bb37fe0612f4709d291a4922f1f41754a2bb59bd12c3c31aaca626ce4aa943f49d8686a186e3716bd563fdd12ec871f4bec2f5fff3b279676bb471490e4b8ba13fd846023ee8d7bbdbfe5fddf55af12799b73b7447425d844fc26c2b619e4465e1a455d2339f9b01148d4d9cfe4cc7a1036608d49f7811abe18550fc25a1fa4de17360090373db966f03089c383bebcf1ad0aa23fa191aa59fe4d1a49c51dadfb66687e942e4bb950a1ac39a1c7a7694a39fa695be9ef570c6e0dece36ef03ba864e57251356189b38defe8ecf6ee64281ef91015a14d06408bf01ddb9901946761f51d09553121a3834bd74837c41f9f9312ba8a916ec3b6e4b9c2731df0ad5fa4129cfb96710bbcf8d4cdb68df18d27c2443468fb968a01f3474e8c4b66f5926b511c57a89e3bfcd3390aa87e29a7e495cf7087574cda2ab87b402cf0fba1a94c493594f81c52f0ac47ac8047b18eaa1d684f7726cbd802e239777817f137fe0806891a03b552bb0ecbf2543d842375567ae79915df37345790d024fe78f79e40366970cf20097e20201d3cccd247d7033272290c9bf3209e41202ebc59b501119bd3f2a5d2e43b2972fb4624f95b699cee5181079205b979b39ceec9b4de7e6595a566e1176a16765b15cdc72f7ce23c12dd52e3e4d8998d50af7880682bcbdc62729d96137bf1141f2d016e6d70adedeb428e5fa9d35f4db4cee1d7fbd770c38f4520d0f5e3141d393ea00ff31d0c699f499be573e6ca4f023ade27ea709dae9a96f361ee8b9e59165e7b698133d467e04988adf686f206fd1ca48bbc1a3cc820d34d9f2941db7dc554a860f10d0968f3cd83a08044f1589eb63afd7add4219fdd97ebe209e69b7745896c99d4b53a3a3e7a55635502d1d6ba09cf87ccdfbedb09355c03c8c9d7434a3ccac1db4e3bda025a4985596b4b544b0f1f576f6356b735650a68849a3168c2085cdcec34084c8e048288e17d051fc39153a7b4775beea018b8ac7b34e8e537371ab33d514dee2dface7fbd5726b861d7fdd6bfd94183ca304809d5bc8ca071423373d69c8c67e92143f407d6a4e3e58e22f1c68e7166c8f60da08fa74fb875696893146017b2ceb2f1028025121fa2c9da03b9b81f1dbf07efd7f3764ba37ef31cc8c028f86cea03840782f078e76e1e77d0de8a5d974e9aeb9cfaa1a3dde354468ab4bad5f82bb64bc52e02695404862990e40b12c05ff5404ac3d3dc61655442c7aa29f865e66c505483291a0f5f0a3fdcf3fb6b4cffb80438232336628141ec6906163cb6e47eaa2aa574508b45194b85db7013cf3352db0fb46430c61c508a37411039daaea7d1c7e8b3bec9e043886f5ccdb570de2e40d8b3926ac544076995df0adf0a673275ac1fc1adf6e7871eaa2d2154b48639eccf16a059278c2da52154300c68a65bfa083cdea19fa25d08cec4e8b649a6137e7137ba6ed39748ddb7a75f5c577fd8702dfc264288866104b67bfaba72083cc468a3e88ac37c7e3cd1d2dc794cf3ed463c608b4c569b06fa9e847eee1f96c365bbc794326bb784054fdbbd6811c0349488d1ee7cf0cb01d40402c1f3ca4b38c6a9f770d6fc3e05855b61aba407591d4d7eb767c3000f48d2ead18513a2d51c8a390d68ba80f616a2531a397970e489986ca74392072dc9fcae0dd3984aeabd713e485d51a5d5cc295c5672004fa86e5ae05ec9ee1c29cb28370c63b016729a8adbae832b04524ddd5d259707f4eb339295da856924ce138f35759ee5e93fc4363e75f604f832b148faf869fc570ecfbf463b62f4a537ab841485aae842ceb1c37fa26d4764a7ff3af403cc35444e289b60ef3cd93264ebf0922f034efd6f3784ec62e50b7ac0a0144208c8e9e86cd7bc81bfcaa1ec9b7a55fbab1360437d3cf71bf9ed2bbd99ce7ad03b11e6d841d9b86d926b7817f9d975cbdd4d233008ced5233021a6f1593495e8651973c27d3c3b46cf099079c619093f1380c9630f48f440f5030a42f42b109313caf1fda659240d29864f289e6ee781dd77d1c80ad026920d4b21755c7454b169e2cbc3003583a041b1b2552cff5c0e6769335f45e8b81db33a2b53706c93d36104c89682c3ee0d05c9938b0e9229d05891e307adef6bb5b911e7ea66bb7d964cb254ca67e9efdbb2c6814a117e37246b0b3930a9eadf73ab6c2811f5c2e3c625be8596eaa079ab32613728a7306e96c2b93d13738e004ef35a021e3ace80cf9c0e0db52fe5e4a4ad10dbf201df4a42645c7c6f2259a7d32119f12d19409ca92cb87c079f774434fa9b8dce1ba19d3eb8f15a8cebc04bef27003f1060d7911d2b3aa4a20879fbd14a73aa2d535eeb10e21f8c7cfe41a5df2f5acd0cf702eadb1c8dcdbd51558555cb4159a548eec9951202ea87c10c15eca25cf107ada4bdc33e458992fc9e59f8818a3bed76307856725cac16fcc7df7a1118aef15bb15bbeba0c708c7d92667085773b3a9b4356655874a79db30cfcfc76bf4989a1b1e6430ad101c891455c13f94b1814b463698a69e4fc3e88d9283739046b57163bda8d976b5be19e03ca3d3d998852dd1df9ef2ad5d4f731747c272f5d658975858d942dc9ae29460524dbd35c7ed032c904f66d82f74d796523599ab2080ea44ad943ab60b38b3fe19fe23516be28d99e55215314fa4bb962f6e7a242ff35cd5596a00bed36a8b587213b2c0132a4fb5069c021793713da8d655eb655ed6ace67a0f3d8cc07f854bbc364a9d04668864dfe96ee7dd14bf948717f43f7fff374c3be04a6f8da2b617979a7571a73ebe1226f9b1062769160d1c28919287b94210b19de70e61f2953370daf84a191750a64f16f3f836f7fd572d25b7390b92f66acd7692f4a724ef7d81a2682c6e8e8f78932c3badc9a0c98b7d86a5e1ac175880814d26d35a8fc740b7a6ae9ec599757734942f6cacba0c957217d7869edf8be70f05bf4f26c56ba1f8281f1c2e8741c9e56e52610d05b18b2bbddecbb46e48caf6050a8c24c5f376841d61f1cfc1a8cdc6e444fe5905d751e554a4e5e27b4ebbd647adfd9abe4eb320d2948d96aa7653ceb585a4900a936b6d614952e1f6c737b2006cf2f2e67f8be31136f9248ef4919aa0450553b2a51fb8ee47e9bfe60a923f62b4e6b8470c23e7c6c1bd0c61a94110177f60085c6ecad69a1a8972ad4c272409ad5b5057e0a5ca30cfcc355cef30c1cfbfefc621d6bf8163c0a51ad8978f53f0efc0d41c0d55ac89e9dcd36021d3041e96c19d2345a0dc4bc8274ce958cb54d7109446e97aaf1af59f49a0738a6015f872f194ba5c354868b8298ddb449b232034e6756493230c7a6f5b3a4893c15d549d09c902063b61cf8413a4c8a2502e260b728d862a074c6b42905d0fb47f63aca35a401d5395fa07bda8b741356676a06b0abc62f613f5c92e4d6b004d2e5ac8f50b4d0dc59675a3c87ad63e02cf2d11921087247ae5b92aa7114ff513677718e88c67ca8cc1c17ccc578a0ed3a235c566503e17b0bf1ddc3fa3dc4d7fefe444a3f48b63dd2b9251eae1a0593702ab20c642ca93a4e0de895a3da3b25242c3261130cc9df0c70bb5a62ea2e23369300f4c805f5b6d82e5dbf0d50ba34d6778b2e8bcd583b0947da0b969cc0aac5dc35e8e1464433aed4b51cd6f65fafb8fb505ed37fd5cf696d7ac9826f2f2944bfdfcf6e4f439fdcd1030a2c140ee8193b217287bde62bbb058c3b37afe20a35137f059343ea87f87ddc9ebf2922441458c69d3d5134711979de25cfea7a58035cc9a7ffdea175e1b4c98a673422cc879fa961d07b4b908682bdd4fcd1cf6f75c240a181bd0b8afcdbe94bff6f217f7e82d8f82af2638afa6a387f65b8f98b0197c81a50d526b4110ef337e8c1922ccaa968ac3bf561569a603c2c2222f1af9463792423eb2da270e0e36ef819c26bd05c830c5565d5e0f124227ec4c247afa1453202904273c29d3d832aecabda783ce198504a043047b26712db5a0bb06357cda2d99a0f3d1b7985b3f5dc5cb655bbc7532be8660d31e017765db300ca2221f8962513d8fee02c0c7a778dd83e223660bbddccd16cae98f30e0e5cda9e86de58491e7fc87ebb8683a429096db1003b77fceb1e65774494bd395f138dbfaff961c9cfe1abe8df62c9d3d2bfd622215a63e4f8c14b8365ca673f4c2345e96c7eb9a3f7c827c57ec04d29b288a05a0b854b0b113d11dd6e4118d42a864bfa478261e38f20035504ffc01e618435b341813c61fdbe51aa6014b289cec25dd5e89334af18570125c2"}, 0x1004) 12:05:18 executing program 6: r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(r1, 0x40086602, &(0x7f0000002a00)) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r2 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r3 = dup(r2) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000040)=""/200, &(0x7f0000000180)=0xc8) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000440)={0x0, 0x1000}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f1d9c1a045375d2a15e55ef0b1c4d"], 0x7) 12:05:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x4, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:05:18 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x401c5820, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:05:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x600, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:05:18 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) (fail_nth: 18) 12:05:18 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040f04090063d3bbc8000000000000fc0f0000000000514d10d59fa46210e2ef26806dd4b85792a15b3fc9ad1938ef26ef4f545aaa32dcb8c5c91777dd705fdd326399251949d9100a51e766dd61bbfc75b6365583e3c18845dcf5001b5e"], 0x7) 12:05:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:05:18 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x401c5820, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:05:18 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x4020940d, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:05:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x5, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:05:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x259, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:05:18 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x4020940d, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:05:18 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "ea5f37"}}}, 0xd) [ 1352.414075] FAULT_INJECTION: forcing a failure. [ 1352.414075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1352.417363] CPU: 1 UID: 0 PID: 20201 Comm: syz-executor.4 Not tainted 6.18.0-rc1-next-20251017 #1 PREEMPT(voluntary) [ 1352.417394] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1352.417408] Call Trace: [ 1352.417415] [ 1352.417424] dump_stack_lvl+0xfa/0x120 [ 1352.417455] should_fail_ex+0x4d7/0x5e0 [ 1352.417488] _copy_from_user+0x30/0xd0 [ 1352.417517] kstrtouint_from_user+0xbd/0x180 [ 1352.417550] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1352.417582] ? __lock_acquire+0xc65/0x1b70 [ 1352.417633] proc_fail_nth_write+0x7b/0x220 [ 1352.417663] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1352.417695] ? lock_is_held_type+0x9e/0x120 [ 1352.417725] vfs_write+0x2b7/0x1150 [ 1352.417749] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1352.417786] ? __pfx_vfs_write+0x10/0x10 [ 1352.417814] ? lock_release+0xc8/0x290 [ 1352.417850] ? __fget_files+0x20d/0x3b0 [ 1352.417890] ksys_write+0x121/0x240 [ 1352.417915] ? __pfx_ksys_write+0x10/0x10 [ 1352.417954] do_syscall_64+0xbf/0x390 [ 1352.417990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.418013] RIP: 0033:0x7f5fcbb405ff [ 1352.418031] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1352.418052] RSP: 002b:00007f5fc9103170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1352.418073] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5fcbb405ff [ 1352.418088] RDX: 0000000000000001 RSI: 00007f5fc91031e0 RDI: 0000000000000005 [ 1352.418101] RBP: 00007f5fc91031d0 R08: 0000000000000000 R09: 0000000000000000 [ 1352.418114] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1352.418127] R13: 00007ffd9df4430f R14: 00007f5fc9103300 R15: 0000000000022000 [ 1352.418164] 12:05:18 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x80086601, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:05:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x6, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:05:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:05:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:05:28 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:05:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x7, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:05:28 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="03c900616aab901e04509f542799d6ec1eb79354a98f0e9f48fe20e154746e7edde6ed4cff7c8c49eae361db5fc78b14dd3df102e5295c883d957f94a392ab4454cbeff2d2429b86d5e37486e37fc462f4171cd93ddb787135999f8f7952a8ee7403334c8b"], 0x65) 12:05:28 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x80087601, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:05:28 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x80086601, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:05:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3e7, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:05:29 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04200088d1d11a"], 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x3, 0x0, 0x1c}, @l2cap_cid_signaling={{0x18}, [@l2cap_disconn_req={{0x6, 0x40, 0x4}, {0xa, 0x7fff}}, @l2cap_move_chan_rsp={{0xf, 0xf8, 0x4}, {0xbb4b, 0xc8c5}}, @l2cap_disconn_req={{0x6, 0x8d, 0x4}, {0x1, 0x31db}}]}}, 0x21) 12:05:37 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03000000004320"], 0x7) 12:05:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:05:37 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:05:37 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x80108906, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:05:37 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x80087601, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:05:37 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:05:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x8, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:05:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x150, r3, 0x2, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4044004}, 0x40c1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x818}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040084}, 0x20040000) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/bnep\x00') sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, 0xd, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x58}}, 0x0) 12:05:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:05:37 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x1f, 0x1, 0x5, 0x15, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x1, 0x80, 0x3, 0x1}}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x6, 0x81, 0x1, 0x1}}}, 0xa) 12:05:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x9, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:05:37 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x600, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:05:37 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x80108907, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:05:37 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x80108906, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:05:37 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x2, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:05:54 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x3, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:05:54 executing program 6: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0400060020"], 0x7) 12:05:54 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x80108907, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:05:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0xf, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:05:54 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x80111500, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:05:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x1400, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:05:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:05:54 executing program 0: r0 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x1f, 0x0, 0x4, 0xd, 0xc, "58eca063677a10e93d29934902d888bbc19d966647f9cd753a959e4e4f018b642adb08059e86dabf759ecc2bb6f5d6f64a9b1ee9eb38e205b332225bed1f570c", "d6e5e0344d8edb9dfd57343ecc6c32bc6dea66298b03457dfbf2f44a6ed4590cd09508b448ce4e4b80d66346015b2f6ec68ff9b105ad6f508604854cf11abae5", "e518c8e7d3e5dd53fb44e02c51fe6cb7cde37198974d6042761c8a01a93d14a2", [0x6, 0x7fff]}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0x1c}, @l2cap_cid_le_signaling={{0x18}, @l2cap_ecred_reconf_req={{0x19, 0x2c, 0x14}, {0xffff, 0x8, [0x0, 0xfe01, 0xffff, 0xffff, 0x3, 0x1ff, 0x3, 0x3]}}}}, 0x21) 12:05:54 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x97}, "7f0c3269cca31fe2cd7795d79b691e42c439c917e4951fde91885f8a1875fa6560217528c24d05e9e3335024a366a8890c33f417c588f8c15851b0e956a8dfc91187a51f4b5f478c713ca7379b429b56679910366c7ed0431b04841fc2bf15f131d220febafe0cf62119298f5a25bafa48be729c2f59d8f36d8e00c6849c51f66445e4a8f5b57ad8ffae6c32d3d29fdf12f4b7b341a4e9"}, 0x9b) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="02c8c0ab00a70001000f05040008000300010802000bff0d01080009000101ffff05000c0305000080140d3f06000400810007000a03020000000a0502000002047f480000080180040901041f0400470e050006100400fffe00800000500400000300f0ff03090102ff3f00e4900180050100050100040903dbbf000009000700040901000703000100dc03050120004000010003000610030201044a0000000800000001000100070200000702b568"], 0xb0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@none}}}, 0xd) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x9, 0x2}, {0x79}}}}, 0xffffffffffffffb7) syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_delete_stored_link_key={{0x14}, {0x20, 0x9}}}}, 0x8) 12:05:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x5502, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:05:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08002600a809000008002700040000009f"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r1, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) dup3(0xffffffffffffffff, r0, 0x80000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x4c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x30, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}]}]}, 0x4c}}, 0x20000005) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000c54d64ca3ab5db790b42678a27c389e625e5fcd88e0ea42700478234388e94d8934a96967918fc361c83cdabae3c1d38bf30dc1cabfd3f30bfeb26ad79873d8a2536eede9db744ed7612288d407ec445886cf3071f69fd4b21fd819279e99e1b1189e61b027515885c7010aee8494fb1793d83c9a280781697b75cca2e83"], 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x80, 0xc8, 0x5}}}, 0x7) 12:05:54 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x80111500, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:05:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x14, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:05:54 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:05:54 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x801c581f, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:05:54 executing program 0: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000140)={0x0, 0x0, "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", "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"}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x37) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/locks\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000002200)={r0, r1, "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", "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"}) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x8}}, 0x4) syz_emit_vhci(&(0x7f0000001140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1000}, "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"}}, 0x1003) syz_emit_vhci(&(0x7f0000002180)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x21}, {0x7f, 0x5, [{0xc9, 0x7, 0x4}, {0xc8, 0x4}, {0xc9, 0x2, 0x1}, {0xc8, 0x800, 0x3}, {0xc8, 0x6, 0x5}]}}}, 0x24) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x3, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x2d, 0x4}, {0x0, 0x401}}}}, 0x11) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 12:05:54 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x801c581f, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:05:54 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x4, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:06:02 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x80811501, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:06:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xe703, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0xef, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:06:02 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x5, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:06:02 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x80811501, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:06:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:02 executing program 0: r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40044010) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00'], 0x7) 12:06:02 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x717d24b825b9d023, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, r1, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x43}}}}, [@NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xb}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x1}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x3}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x1}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}, @NL80211_ATTR_HE_BSS_COLOR={0x10, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x34}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f0400004320afdecdf05946615f6916bd166a7d796bc28559b4d90032e64897effd0ac01e2665a3d3c3333c11396eb574329be4b3cbd34008e35ba552d33abcb168d2d7365d4caa5bdd7cb4c234baf9008b40e680a8fb8e68d914a19ba6a42f2dfa43fd5b6eb31158f5ae74714d6786236f25481c9e860ef16d5101373fe1461c20521a307df4e6a53f68a1a2d59be0ec88c9061cc55db05fccc3ad8e252169cdb6e048c6a74d1adfd77027ee47480c6dbe3ed012f6b9ed17edaf2ad8b5d88869e242ff680561fd445c6fa50f8cf1e9559b35f7a6701fab1adf17662c6ddfe5936e1e38f89c8a"], 0x7) 12:06:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x1400, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0xf0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:06:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:02 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0xc0045878, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:06:02 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x5902, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x300, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:06:03 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0xc0045878, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:06:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xe703, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:03 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x6, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:06:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x3e7, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:06:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x30000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:03 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x1, 0x11c}, @l2cap_cid_signaling={{0x118}, [@l2cap_info_req={{0xa, 0x0, 0x2}, {0x3ff}}, @l2cap_conn_req={{0x2, 0x3f, 0x4}, {0x7, 0x2}}, @l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x1, 0xb8, 0x5, 0x8}}, @l2cap_disconn_rsp={{0x7, 0x1a, 0x4}, {0x0, 0xc79}}, @l2cap_info_rsp={{0xb, 0xe9, 0x92}, {0x8001, 0x800, "c79bb426455f55856d08faaad1dcc47e7f4392a2d197feea4b0b5564b9784ed8c5b890ba31eae485267e49c1da279fbc02ff0770571711099a679969a8a749582ada49415825f800d6576714d065034d77f5a1616c5fd5f45949e0b403ec6c559059f2fba2468e4274da967011836cb1bd05c5b537d36dacc2ede457b436a69ed9d314a277679f16c9aa5a34cc5d"}}, @l2cap_info_rsp={{0xb, 0x4, 0x43}, {0x8000, 0x7fff, "aa2b40f54dde3d802d2b3ed9097501db29f5bd62e3f350cc5d9ab550dd729e453e43f12898c0b7a351c5f0985366181486bcd4f8eceae753a773323840c4c6"}}, @l2cap_move_chan_req={{0xe, 0x2, 0x3}, {0xc178, 0x7}}, @l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x20, 0x9, 0x1, 0x8001}}, @l2cap_info_req={{0xa, 0x60, 0x2}}]}}, 0x121) 12:06:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:11 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0x7f}}}, 0xa) 12:06:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x80000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:11 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 12:06:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x500, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:06:11 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x7, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:06:11 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0xc0045878, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:06:11 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0xc0045878, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:06:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x30000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:11 executing program 6: fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) clone3(&(0x7f00000002c0)={0x8000, &(0x7f0000000340), &(0x7f0000000080), &(0x7f00000000c0), {0x21}, &(0x7f0000000100)=""/80, 0x50, &(0x7f0000000280)=""/31, &(0x7f0000000280), 0x0, {r0}}, 0x58) r1 = socket$inet6(0xa, 0x7, 0x80000001) getpeername(r0, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000000)=0x80) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000400)={{r2}, 0x0, 0x0, @unused=[0x8, 0xc3, 0x165, 0x4], @name="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"}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x804}}}, 0x7) 12:06:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x80000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:11 executing program 0: ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0xffb4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/94) 12:06:11 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0xc0189436, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:06:11 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x8, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:06:11 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0xc0189436, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:06:20 executing program 6: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="048bd9ad1bb28015e87abac0c5060268b733578e13efdc7af5349f5aa073ac1228386297be5f6ff6f344ef0de3b72d472f506a16c60cae0d659e811499205931cd5e1fb720ab37"], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0x1, 0x1000}, "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"}, 0x1004) 12:06:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0ffff, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:20 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0xc020660b, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:06:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x600, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:06:20 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT], 0x7) 12:06:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0ffff, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:20 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0xc020660b, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:06:20 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x9, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:06:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x1000000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x1000000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:20 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0xf, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:06:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:20 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback={0x8}, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:06:32 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback={0x3f00}, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:06:32 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xfe}, "f38047dee274416e231b1c2e87bc51b7f9d5e8cf1689ab10b616f443afa86ed2d534377df6a91cacb19d544cb85002fba1fa28e9ff4e93cc193a117aba074f66f8d4622b71e10f7a59b7116e7535080576099c3dc5ca8ca90408c30ba46673d9df79ada3590f4404f83ace494a287dcaf1ef1121a80f8a89d59586d6dcf402eb68a57eb2a10377ce52a1e00098125457755c55aa453edd4fc1cab25c680c887c2b6981b12272cf4ad24ca8b1f63b5d5790d9d382c90dbc2903547e9f02f556e10fa696143ed278db694577b7166d811f6706683d83353fc10159b76ce483686017c12758f5b2facd0e70fedd04ec41c29dd48e9a44cadab2388a4c182964"}, 0x102) 12:06:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback={0x8}, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:06:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x700, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:06:32 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0xf0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:06:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3000000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="f40e0a14", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08002600a80900000800270004000000"], 0x2c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0x6, 0x4}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000240)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x19f}, "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"}, 0x1a3) 12:06:32 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback={0x1000000}, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:06:32 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback={0x3f00}, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:06:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x900, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:06:32 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x288, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:06:32 executing program 0: syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x136}, @l2cap_cid_signaling={{0x132}, [@l2cap_conf_rsp={{0x5, 0x2, 0x18}, {0x20, 0xa2, 0xd95a, [@l2cap_conf_efs={0x6, 0x10, {0x7, 0x1, 0x7f, 0x1, 0x100}}]}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0x133, 0x7}}, @l2cap_create_chan_rsp={{0xd, 0xfd, 0x8}, {0x4, 0x5, 0x1}}, @l2cap_conn_req={{0x2, 0xff, 0x4}, {0x149, 0x800}}, @l2cap_create_chan_rsp={{0xd, 0xff, 0x8}, {0x1, 0x8000, 0x0, 0xe380}}, @l2cap_move_chan_cfm={{0x10, 0x9, 0x4}, {0x2, 0x7}}, @l2cap_move_chan_rsp={{0xf, 0x8, 0x4}, {0x2, 0x67d5}}, @l2cap_move_chan_req={{0xe, 0xf5, 0x3}, {0x7516, 0x40}}, @l2cap_move_chan_cfm={{0x10, 0x6, 0x4}, {0xffff, 0x3}}, @l2cap_info_rsp={{0xb, 0xc9, 0xcb}, {0x40, 0x80, "b6794f2a8c07069d4f77ba1079bbe51030241fa31979ec762968f5bc6dff24433888ca21e2b6737e6b7a65b3222fd5dd461c86cd5083d88a15114e84a1f583da513bac09980de1579e2000fa71381bd917b0bf206ed7c64783d9ad0374f78b174c014b9962dbbfed6cb508f4bebe7df8f2e7e1db6f89c4d8a0dc33fa1de5c152d0d9333aebbe6738dea16f5f6f48f9b71317e00a37c669b5fea299cfd3a2bcfb05e7dae954ca6469fa82d98995866709fc94ce7057fa199ed397ce2564523f3786be2a6ff97296"}}]}}, 0x13b) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x2, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x21, 0x4}, {0x2, 0x5}}}}, 0x11) syz_emit_vhci(&(0x7f00000002c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x9f}, @l2cap_cid_signaling={{0x9b}, [@l2cap_move_chan_rsp={{0xf, 0x40, 0x4}, {0x3, 0x4}}, @l2cap_create_chan_rsp={{0xd, 0x4, 0x8}, {0x92, 0x5a, 0x20, 0x4}}, @l2cap_conn_rsp={{0x3, 0x3, 0x8}, {0x6, 0x0, 0x9, 0x64}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x4, 0x2}, {0x300}}, @l2cap_conn_req={{0x2, 0x1f, 0x4}, {0x2, 0x80}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0x7ff, 0x401}}, @l2cap_create_chan_rsp={{0xd, 0xff, 0x8}, {0x8, 0x400, 0x0, 0xd8b2}}, @l2cap_info_rsp={{0xb, 0x0, 0x55}, {0x1ff, 0x478, "5c3ee1f762cdbe9dc96b835f35d79f7fb61264cb4804f4c93456e60b155cdd53f66449f89be58911e4b8db82d3159614a73b3ded5f8c24e63525f8065d47976e9da84f37228612ec1d449b585e8bb00e48"}}]}}, 0xa4) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="03c8007ddcd6a8e14ad9812a29c12f9b9eb4116f047aede137d200ecd6010000f9820dfdc6f04cc10629ffcc8981ba153548c663d1e0c89fae4b195865dbfdd655a3edae0f2ae2adaed8727eeaee23b61b18a749e18631ae99d6c4c0236d1ae671f15e7dffdea634432dfac2a2ff3b1291aff2f400"/129], 0x81) 12:06:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x4000000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x3000000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:43 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x300, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:06:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x4000000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:43 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback={0x8000000}, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:06:43 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback={0x1000000}, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:06:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0xf00, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:06:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x5000000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:43 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="042d00be8001000000000000"], 0xc) 12:06:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x493, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0x7, 0x4) r6 = openat$procfs(0xffffffffffffff9c, 0xfffffffffffffffd, 0x0, 0x0) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x401, 0x73}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000840}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x53}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7f}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x41) 12:06:43 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback={0x8000000}, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:06:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x1400, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:06:43 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x500, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:06:43 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback={0x3f000000}, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:06:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x5000000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x6000000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:43 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 12:06:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0xe703, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:06:43 executing program 6: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04fd2d0000b15b"], 0x7) 12:06:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0xef00, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:06:52 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback={0x100000000000000}, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:06:52 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0xf}, {0x1, [{@none, 0x0, 0x80, 0x79, "bdd7f5", 0x149}]}}}, 0x12) 12:06:52 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x600, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:06:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x6000000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x7000000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:52 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x1, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_reconf_req={{0x19, 0x7, 0x10}, {0x6, 0x4, [0x7ff, 0x3, 0x7, 0x8000, 0x8201, 0x2]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x2, 0xc9}}}, 0x5) 12:06:52 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback={0x3f000000}, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:06:52 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback={0x800000000000000}, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:06:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000080)=""/103, 0x67, 0x240, &(0x7f0000000000)={0x11, 0x4, r3, 0x1, 0x8}, 0x14) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) 12:06:52 executing program 6: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x39}, {0x4, [{@any, 0x10, 0x2, 0x4, "89370c", 0x5}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xaf, 0x3f, 0x46, "a23ed3", 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0x5, 0x63, "49a1ee", 0x2}, {@any, 0x7, 0x2, 0x4, "d704af", 0x20}]}}}, 0x3c) 12:06:52 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9000000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:06:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x7000000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0xf000, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:07:00 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback={0x100000000000000}, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:00 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc9, 0xde, 0x1, "de1cd92e67f4627a"}}}, 0x10) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 12:07:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9000000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:00 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback={0x3f00000000000000}, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf000000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:00 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f00000015c0)=[{{&(0x7f0000000140)={0x2, 0x4e1e, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="fd", 0x1}], 0x5, 0x0, 0x34000}}], 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040903c0c800257862633d1ef6055ac1557c3ab4e4f0fdd7ca079fda96c9768ba6fe40dde71ba195e9acba53c7482ff3f5f499de079907db0e8e94a5cbcab4ce7525527df51c0f86d777a04435e4e4de511ef38b17f194666b97e1a6cbc9c2fda68db97e515d6b515d130850365c1a1b49fec2760701c009efc027922ff71e2d8803e929fc5e108a8ac8d1be33304f69d235bfcca1aa8edd8528863c77a5b1393ce0e9449c6701fa6c759b499862540bd2202e48ae86c95f2a2f56ba78dea6cbb1bc8507b9bf6c08ff00a89b8fb454448e4f57e24ea841d3d35a2abf6026f2ddd6092f20"], 0x6) 12:07:00 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x700, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:07:00 executing program 6: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0xb) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0x11}, @l2cap_cid_signaling={{0xd}, [@l2cap_move_chan_req={{0xe, 0xcb, 0x3}, {0x1f}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xe1, 0x2}, {0x5}}]}}, 0x16) 12:07:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf000000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x14000000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:00 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:00 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback={0x800000000000000}, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000002080)={0x8, {{0xa, 0x4e23, 0x0, @private0, 0x2}}, 0x1, 0x8, [{{0xa, 0x4e22, 0x101, @private1, 0x1}}, {{0xa, 0x4e22, 0xc4, @dev={0xfe, 0x80, '\x00', 0x39}, 0xcf3e}}, {{0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}}}, {{0xa, 0x4e22, 0xfffffff7, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x40}}, {{0xa, 0x4e23, 0x7ff, @private2, 0x5}}, {{0xa, 0x4e24, 0x9, @loopback, 0x1}}, {{0xa, 0x4e24, 0x2, @local, 0x9}}, {{0xa, 0x4e22, 0x200, @dev={0xfe, 0x80, '\x00', 0x32}}}]}, 0x490) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r1, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x6, 0xae, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7880, 0x10, 0x8, 0x80000001}}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001d00)={&(0x7f0000000140)={0x1bac, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0xed, 0x3, "eeda8affc90d074493257c0ec948d4e4c06b37cb57fbf695b47259c6859c8a6eac445e32265d7f59996b26f11e6d7058e12b7c932d628525d9640396df63c6a15b9e1fb35ecca65e89a335bf0ac5b2ab92d9b99460d9b20f3ef9b4f954752b09f3628a02b1b2890a6f64cad6cbc75dd023944bba216e7d46a49f43aa49175302160fe27ede7b2a63a65f3b315e0ff61cded170a4a431b851782039d22d957ff023cb95087a63d85958bee1314ebf07d0ad8f87ab3b427c1ee67f48558bf3a6d3c8c4a908b3de608fe450420fb561f155c22c02ea6ffd096edf747959e780d471dd840e1ddfccb06854"}, @ETHTOOL_A_WOL_SOPASS={0x8a, 0x3, "2e366a186e790eee0ada90dd681406b47f20ca043c117bb6c2f1ca8f33f671daacef592238eb911b3533767714e5f321c8b647d262b8a1f4b0c6c3533b29b9e616076b7604e4a9f1831b29e431ba6152c4af6f4aafefefc834ab4e5ee3f6b6033ea64ee8e715b3a1f7b6c942e200d65d2c42d9d78dba25d08ba8128d350a34d253a7983e5677"}, @ETHTOOL_A_WOL_SOPASS={0x7b, 0x3, "830f27c5a6fcb11bb9fde51ffe8c213ee0ecbabb3732e68eef579ad5980ced362438a8a06063b7d7f387d938b8ed1ec7042b4b62305c4d47ed92c7a46bb9019e67236aba93abf5bf80b17bd9aa92447fd0911d4a872f751e91e388ab868cfc564528bcc3c40a559f4ecc1882a7700bd96458f73dc7c672"}, @ETHTOOL_A_WOL_MODES={0xa0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}, {0x4}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ')($\\//\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xe6e0}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_MODES={0x74, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x6d, 0x4, "2f813bde28f6b0e1ee2ec17e49d5eec8e7e51f619612f4fd0d0deb52e6c82eb4551fd8a2957afa437f846afac7aade06f9d8e860925b7bb6232f531c131a0b5f5d695554cd42eb5c80d5a09ece47a2359567caa2e8643f0dc3d3aa752ca78f07853549800abf672564"}]}, @ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x13a4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x61, 0x5, "9dc590893fd722504caafbeed13ec8362dd051194707e891f427379044b0aec60d2d4ea088b6db82a31c524725024b97e3a6f83f1ced665df5803c596d6e811db73d57198eae09515c0945aeda480e7ec89b0c1db1822fc918fd004a8c"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14c, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1a}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '{\xaf/}[./~\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '@\'&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '/$@./[]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ')-&\\.[^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!%,[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&*[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '^-\xc3\\\x80)\xe7\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x65eb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xb2-\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(%\'#\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x35, 0x4, "2d73264dfdac6b3d367a1043b1941764453e6aaa9e0b5ccb557fcbe0de28771ee87a04098cd3575a8baf756472d16b195c"}, @ETHTOOL_A_BITSET_BITS={0x10c, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '++\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xf3\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{},\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.\xd2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdc7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-@,b\'!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '!*}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\',#@},(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xe7*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}]}]}]}, @ETHTOOL_A_WOL_MODES={0x190, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_MASK={0xe7, 0x5, "3f29b9e85e28645a97726be4b267765bc133fcf7c2b162de561cefaa2b138b724d7a3fa1a774f7c41ed7c882f69c08da39fbaa83b21c741440622b8529a79e7787f31e19d53fc182c386d4653e124f1eb66eca6a2a5bc8d45f40b477936079f39b86ed004ba89c00a53c5b75b983bb704b7148a6be60d1597c52ac6167f08593974dc765088fd3a393a1a34e442f5a712cffc7ce05c3de0ac9f350d2376064a63ab5f7c881d1b5c53e8c5c459767c9096564290dddac1ceb7ed25551c1358c35ed624efdfda140ec60e7087167ee16ff6e7a25e868954178cfae24c52183931ca88bf3"}, @ETHTOOL_A_BITSET_VALUE={0x9a, 0x4, "59f7d639e2a1bd386eca0a3008555caa4059b278e7e884b50aa3aca929ef0d1822666505baa63e7e52e688a3a44b372bab26d397f94321bead5366e13c07a2b9acf4653b0023987e14a30d767d8009951e2806b6cf0a9ac2571c77c90aac05d4d5ea06d848dea86b1704c6ccc22b8dc7bf2df27868aae77b69240de4469558a034f088274f4cb3bfa6c2a65ec37b88362837e0e28e14"}]}, @ETHTOOL_A_WOL_MODES={0x30c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xef, 0x5, "0bc2c888b55717db74aed27827c9b18a242e9d5b9d79e042ecc920f39940e211e76695716285b89c6e335f9f442f2e6a724972ab1bcc01c7a6c7fdde7a16c31487d4f914919264aea7d7efcb8ae031e397504ba096006f16861b73e8849a7c675ddbd4f94cd1368c6f3a2ccb3bd5fce1294a6e14d4de99499e0ce9e50d176f4a6d78da6997e02915fce9213f0a0a35ac61dc5c1bae1c5adbe7247090c584f77ffb3d4c57b31b27fff7b1198bf108702bf8282ba53f5b57358a3fd756ca7752a127ef0933d6b68757609f1b9ab5ba6ae26e0207a12c1ed224ff63ee301dc3ff33a3df5aefc36c1b7760e7be"}, @ETHTOOL_A_BITSET_VALUE={0xe2, 0x4, "1c9bb3c19a2eff476a1a56889a60ffaa2e7deb694d55c285ae4f667c76dedf70346a67003c4b35f549ee94fbea4f85ef6241ed7953e8aaad1724e8c8f88097887ac70f64fd0ba59cb9dbfb9fe96c89e02ccc2d1b663e496e6527ce37f6696f76eec47ea729e02b14af66c36f1e81d431db80a512c3ff37e58bdf52f24d8dcc39943b399f87862e54f10ce19179625926c0b2381e3942c2567bb805d18ce9c59b2fae679e84437813fa8b622c6bf13e1dc8cb721b1d967fc44fbab10894321b441dc0e0735ca71ac067efb57e87616801310bcc6377c92240ba482db375b7"}, @ETHTOOL_A_BITSET_VALUE={0xbc, 0x4, "8cc02b0409c90aa8ceddd04773bdaee0aa71b9aca3083a68496f26063ad99d10821a6ede4223c6e9dd9769f41a1cbf4b40aed20cbde79a601db8890560fe87852ba471394fb9fc6b504cc8e6487d48106b534ffbc10c1922c2a97c7868caecd4f5bc0cb8925dba40692c711fb0ca14c324a4ce4cfb7d5784d611a36ac3bae08833683a7c60cc5d4aebe174323f767ad5bf0454dae7288e8c21a8a503cf371d1ff206ec00057f7892d55f7533cf069dbf5823f561b4915011"}, @ETHTOOL_A_BITSET_VALUE={0x70, 0x4, "ce051f01e98a545a331c94a17099944340f90333eb4f03c615425d4e898f696861738a341c9b37383e4b84fc90f619160db1aae81755ec322b8b7a698ab37046dfabfdc1682e2aa0564422bf25232e086ed2e2a1bc142549d315dd7a3eaca38f6cca3b8558de1d33cdbe5fc8"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc03}]}]}, 0x1bac}, 0x1, 0x0, 0x0, 0x4000098}, 0x40000) r7 = syz_io_uring_setup(0x2260, &(0x7f0000003a00), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r8 = dup(r7) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x1b, &(0x7f0000001680)=[{&(0x7f0000000580)=""/199, 0xc7}], 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x6c, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xe77}, @ETHTOOL_A_CHANNELS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x40}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40040}, 0x2404c000) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r10, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001e00)={'syztnl0\x00', &(0x7f0000001d80)={'syztnl2\x00', r12, 0x29, 0x7f, 0x3, 0x8d5, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x700, 0x6, 0x10000}}) 12:07:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x30000, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:07:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x14000000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x80000, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:07:10 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x8}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x59020000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x55020000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:10 executing program 0: r0 = socket$inet6(0xa, 0x6, 0xfff) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'geneve1\x00'}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0409004000"], 0x7) 12:07:10 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x900, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:07:10 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback={0x3f00000000000000}, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:10 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x401}}}, 0x7) 12:07:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0xf0ffff, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:07:10 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9effffff, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:10 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x44, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x375}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}]]}, 0x44}}, 0x20000010) syz_mount_image$tmpfs(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000780)) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x803}}}, 0xfffffebf) 12:07:10 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="140f04e9b54831"], 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x3d}, @l2cap_cid_signaling={{0x39}, [@l2cap_conn_rsp={{0x3, 0x0, 0x8}, {0x5, 0x9f6c, 0xfffc}}, @l2cap_conn_rsp={{0x3, 0x5, 0x8}, {0x5, 0x8, 0x4, 0xfe01}}, @l2cap_move_chan_rsp={{0xf, 0x7, 0x4}, {0x7, 0x7}}, @l2cap_move_chan_cfm={{0x10, 0x5, 0x4}, {0x3}}, @l2cap_move_chan_cfm={{0x10, 0x3f, 0x4}, {0x1, 0x8}}, @l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0x7, 0x7907, 0x4}}]}}, 0x42) 12:07:10 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x9effffff, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x1000000, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:07:10 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0xf00, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:07:10 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0x8}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:19 executing program 0: r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x1, 0x7, 0xfffffffffffffffa}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) r1 = openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x408003, 0x24, 0x1c}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={0x0, 0x1, r0, 0x3985, 0x80000}) 12:07:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xe7030000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:19 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x80, 0xc9, 0x8}}}, 0x6) 12:07:19 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x2000000, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:07:19 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:19 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x8802, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:07:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xe7030000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:19 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x3f00, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x3000000, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:07:19 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:19 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000001180)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000140)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "36a4b95f8810e129647475e23f528ba852363c198cbbac17d9903c525cea8f87f5ea348b08de2f5b61f61e85013698e1f685428c596904ae00845b1cdbd2d4287544319f1924f5eaed35742ca63a208995a52cc694584f7eae359b8b97982c28c989abff1971d8314f04187c385f1fdc58826f8ce6f86006f0c4c7880fd02026f2b0a65270eb9875b909f0b9f1f21b18a61594c992964fd05086826f8c5c6b11af9dee156782ba6993bc2641f70b093d52dfbac3d2a49b209b29d56c2124c62ff359ad1c526939cabd5cea0fe2d3aa155596a5881e6e600a01765b978e6ad847c4df02cd2e7f595d25f5da97ba7550cbdb4cd3d3b0c12e8554d8b28749c1dc3647165b12ec02364e59b7228bbd52c2a3b45e681a35bdd97d60b09254a40a4f6349ef55be5be6cdbc634a308f5f71bacbec702f670935b5e3b2c9d3aba86357e09cc2184e3f61a5e65a747b4aa59bb3d3e08642310ef1d3de9aec4626f549eb224662430d93507a0e3c3171bdd18fec793d480ffdd497064e9216dbcd87a3f2ff195e3887075dfad00b89626650d77a54189848f496f27156a67944ed4cb82487be96121a02a96c9fc5d40f1a00c6a99ab96163ee9af48375178a821dbf5363e15cfcf7338851b0fcd2bc457df1fdb08b51bcd76875a0d824c2fa8fbc609f567b6d9af9193248253fd4ad1dcb51e1f846d0d093bdffd4a7d5cdd92640519dc0c232f983c8c9e41e3075250811a108c101c5ecb3f8ef116d9da0b7bb82d0fafcf8150b19263bc8e6d714f6e58e050a6e5415b7e83199b66afcf2edaac5972873848b672c9a3a42d96ae32f7224523f028f00e9b34a65b43f6c71269152a160f8e9789ae5cb41f01b38530fce867981f13e58837bd0c83f67549e7984cda76116e16472d318db04f36845b19bdc042085e8845bea91f10b0cfb5566a53d3824fff099493862188cdd5f8c1ba6eb286d42b92deb5da67252281ad5605fa6b22def722364607c607325d3792f07bb7dde2fbb63cc89de2ce957a0c19a45544e1124a33bf80f48540d16912eb2b480af7bb8fc9001638caf821975c5561daa28bcf3a7e3bee5fa40ba3d3b91f31a1d4b5bda12a1ecbc556c6504ba594a9229356837b55a7309066229dc2bf98bc79d567b10518ebb9337949cd2e74d6f8e74f9dd513334178516b0f3148ff1cd85653ae7f44fd05f3bdd5b69c72e4396b6bce62f7549a55cfca04c9c03992393b24ea56303ac48e0b51b881b6d7be8e5637391c9e43b2ead41d7b796fccb9ecf08e33e622c035194d9dc4d90e8a631195c443f5b0022aa9caa2af397f2666fd0b14ad9ecf8e076db7a4654ec6b774bd3419b34138f881b71f8f0f6ed60654b461d31359ea72cba3361351466c2b8ea54fc8f5e6fde491a9c53903c27b962292301952cc8663c3b84eda63bc664bc0a73a00139d3037693a21c66351b22de49d4701e70d156ac0847ad7feec32f54c61411da71af3d360f992045a61c61d7779ec88426e6f3897132db7fa73a4e9e268947283dacf67deb87d4c67fbadba6956a3bdf56f1242203c7d485ea57c8e269180dd702fbaa2648532705c179993c544ba757c4a8303b365955ecb2ba39a351df168249a15c19b86107f1e36ff28272ce74697dff1df9f216dfda8e2293eeb84894a00cb2e6b86a7e2e141f26fbcbd5a43daf8442ea010b5de610de3203648c012352aad2d5707b5ca7bc376f24be87195abb1c2552e80b9742c1305e41ffdecf14c5934c800b9e8e4b3d3a08ce0769863101afe45762a5052d459c48220ec8ce613aba2cb8ff8673e605331825f1d7b05ec86e7b8d3161f0498fb85d35f73fa97a234b6044791169c40df31497a883cdcf8eb9a16ba10299784c2efebc2372bcf316964a8a2e82817b308dbdcc7c51da09f7a4f5a9877f4f148349982fa1fcb214639b499808e0e9c2143f27935ad683365833dc0e4b1205a9936ac634f386e675ddc0fc5d8bae405fb7158ee5332e197c6dfe59f3ead44c989c8db5563ff100426d47ce335211782c8fcea3b184bb3dadcf880101b718a65b897de6553e618c6024def98b905d07fd33ace2cc26f83e4fc8b6ae7f1e5130772fd7a4eb0da4eb8deb84016180964c6ef9572c29dfcfe7b35227c050d29f786b98cd22afff20c6ca705caf0601ff4f2f20dc8fae92df79183b26b20c2edb00ba3af29e9070c5194c92dcfd04a9a25ae13f7c19c2813d5ddbb0c1f28cffad739ed874b5cc81fd805c2efe97ea853d5629b473e860e54673511fdefd87c5b26f27b6f6f17ad7eff2db43cba86c3c299bb5499f6c7779766dd08535f1f5a14f8e69b1d86e7c596ee85ea70770131de5324b4fb0cc9dab924f6b9cc3b386cfbe8abf06f2642d0bbc7642b91af5d7de72a8131856695cecaa2ddf985e6bf0361ae6fd17e796851b9cc915b0ca32274a0b3fab1c031722a98a09e425cc0f35c1e9b2f3afeee6851d060ec1996a12c7387f58215b9ec9275ddb18540aeba2fb53967527fd1bea1be2286487c0050e78bb50ce8c8abfc8ee84a45e754eb347b0115fe65f0e53e0f33b9302ccc30efb23888a82bdf1aa175c178a1fd569b82fe50f41e41b129ebd19a15151236efd42fd2b8df8b0d8e142bc35072e810b1255fa8f8a6b9cc5fd95f729b3a8ae0c4b97fc0d3999755acf1ce352884ebb49bf59d9ce2d732a6ea7d564b722f0901be57a6b060a139c5cc57017ff273e761749721216b65e7f7a4d6cef1067856501e74de209503aba4cc4bfe07ee5c66ee6afc37c572e862b5db1850a599ebf917ae1f773d120dcfb3d3f7bf05c9fd321488cd87e3a50b4d315e2370aa990ffe6a4222a9be302496a093ed31ab337827bc0f35dfd9b8418f4af11f508195e1d859bd91ef40cccc305f6a0cd6fd720d63310c107c59061ab570a7014074f11048254483ed80e195d1a0cf01f07eb7ae2cb83718d1a74b802b2949695240102180a5a6a19af7b5cb0de733ec79de88804a44b2e4d149da3f9917dfb9042ddfbd29fdebb1957f9dfba8c7954ab27d6a3cce4d4be58c6d80ef4d468f95f8da86cd4e19846c3027b280fb3a7876956a214fda1520e72791879a9ec101191f21480836d75af33f84f6de013f263ae523683b9a544fe6e13947978f0b13e3e96d071c109398f1b00a6f3e3d0cbc928fe80c66e44c76cd798c360898ed4abbbd45f44fd7a29b89ff6646d9c0483e180e39df8fb9caa57a8f9596ec14f5d6d6bdfd62a793c95b5ca3c6f4398304b186de1b3463db6e307ca550ef2cadaec8c26e80ca03586fe42e851d0d00cc85b2193bd9258f52a4f637d00c2c10c0c08f2753d0dfa3c7c359539c699cdda5e515ebdf3ff195622f6fd656d46f184adfa5e5aaac54c10c4aa59a708646b30835146e915e63c712152266c2ab7e03ec8df5948e7bad96f90f2d0e2e1505bcbe67e7f557617c8413d99c72cd3436044215164a00ba8f3386b9e940c9d07112a81cd53cec7fa43028f7fcba9c382ba09a610885ad806de31c5f1dbfb7b4d2eeed2c0cd22901e1e2c0ac99268ea2e191e5177a02de02171568a2a41d7dda3d7fde55344c3bbfb9dbb15c39ccab6adc2ec1652f0d1904b235efd83f83ab14a94280e131d4eeac59d9860ec5932226af56ff5e1d123c78072d8b897db7a9b75ebed071a677d8288dfc27d12d6c123a185a421ab932c3d4d923f9a4c79ff61020b2c164bdc0d29748f75fc6f9392d44ab1c2896f4767d7511d9ef2fc14f1723a0af67a4dc7cd31ca9b802085b11e386910c33bf4664e3926ebbec66a91ff7a4314fa4ab8ff6033619da5f30280ea5799530e607c14a3577930d29ba8b377a82ff33eb76019018894ac98839aeba8a94100a2a87c5e95abc3cce3e14a9922a3a23d4683fabcaf317bd3c306844aa1d48a410256cb1f5acafcf300c4518c95e4123dccc5d9e1f7cff51e13a9989cbaf0574cc30ef6e536d73b7f0a30c4f7941a238dd5df790142071404c8a2fbf10bcf2bc285da4c52b31e5b86a6d2ef0859d9154dc53bbe0ad0a48defb69f246e743efcff79c1b2d53cdcc6855aeb36b2cd25903d8928032b76c936492ee9f2f47259cfc45b8983b6bbe354eecc0bb23acf0218e2e20da1dd291a1d8fd382f9c66a006404e5e30773b0dad2ff227e636e02ef0875d81e5c8823e0921c150e29e791c23b5021023d2e3d6e2d9d1ada883b46842473b15fbe3a07a370d052c9980e20bd99b4a13815bac3c7d5a47142dc41f40d147284f3ee66737ce735ee3508b7c3da83e10526dc43a36a0aeb63b5d6672bf22f552781d6219672923e31998b7d5fd944575f1e2979ec9fc32d8ab23da43ac10181ce9161c5ad301b3e0e8afb6ebb17d52d33e567d4d948e546caba7ef76d59fd199445a86ee2d23d8891706457f288f3339f3ddbecebf116e479e0e0fc4c1715f9e4cd067590387a819a1d8701697ae77d54db18d5bcc2ec9446b1e12ca6bdedf8d26fa6d1a08080ec4eb865e45c39f887d8c4dec5a4a98cf5476b5e7462dfec520bff4b84f638b9957d35552492a474ad9784b288c67172d1b66187294994cd67666cde4a58b1fea399896d1b109135e6fc21a7251259c10fc24fdd8a805ac88f2eef00e3ec8d6255c5f7f3fb795d1dd8ad78593d9f9a68a6fb58c7073107ee7e2cbe263d760408afde6636c1bec5463eb6a49579780fa265dad94d03268fcd830ebf372b02804c5cb0249ee64e7bc2a3294beff77070fdfe1f59231e115e541cb02ea21705541ca94d4f051fcbf79a007060650339dfc63e4ce2fcfa3b05c6c0f8781ed3bce010298d127d9aeca464d807dbb33c4dccb785b25e151b1b8c07bc5ccedd5bdcd1c6b53742a2ecfbd17f72d31fc15af0fc0727be3dc0bfbe7287bec397cfae69329843956cd9d2b25ede6614bed48761bcbe1380b3e7224923e2fdd59bb02952fcbba0baa856fa82185929f1ea239a2eac9fcaaf4cc33d1e287418f39efed0402fe89491bc15478be55fad723563b1bebf8d84d42966f6ea81d3f6f609017d1d31b67db4254059c96d58108169ec63aba4a2228a67a17d45e239f79d74df9d1de9dff52e72e86ec1bf436ebb2479fbf2d725be9f8d6592f362ee469718b1637458a5eb342710e7f8953f59438c7145810f3f7f5e23b73112fb4dc2814782fb76cc1df7d7d8605cd3805c25de22f10a73800d9bdbcbb7b75ced25326a69a0606d690ac510adcdd033f0b93ba2c3a2b6a4c218916fb5391045f8eb14b77b8ea32d2e8498972395b247b1a526fb9e83baa07f161224756825eac758c3341a3465bfdc3e593108b4519c30a037d9ee706ceb3e9101519bd5fdb76f112c9898bcc31baf98ee831430207616b04cdcd263a379cc2530ffef30772778386aacbeba59ea77540ab9294df89b5e2f6b7aa992c7ef90026dde3c4e89ed97d4bf7c60b44415aa483cacf882b20f7bc93619459af1f6def8a2440cfd69c9894f715dbc086689552debb59388deef113a9bbff15650fddcffa144fc2e42efe7146b1769cae84a8abf1de695e575f6583a036616c0fa0b1832f7d125db86eba1036be4164ef48bbfdcbebf79b105331e914f7d596011d16b68291f34ccde2f870d696a45daa70ac06b65e175d50507e0f85c741c7ec883f36cd07a941ed0b70d719e9f1972409ab1a9a424a11055c94ea05f9fe75781317762f1b84724d0dda4edfd05b6494c3eb2f3c843f488d0cf36e2e44b59f2acbf22d6572b43d3ee92fed473e3ac81cdd51210bb9dd9c2e2d606de4c2881461c16a98bd4bea14c971c7d5c"}, 0x1004) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_phy_link_complete={{0x42, 0x3}, {0x1, 0xc9, 0x6}}}, 0x6) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x50}, "bd82d058456373aa2ab7dfcaaca770b9528d6e890cb3bb31a5287b6fb43165bae24b72661e36f4f6335d02efd12f5e1abfff258fa59c9ddc246a66515e0460443da9367257babe219229fd979634fbb1"}, 0x54) 12:07:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:19 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0x3c}, @l2cap_cid_signaling={{0x38}, [@l2cap_conn_req={{0x2, 0x1, 0x4}, {0xfff7, 0xf00}}, @l2cap_move_chan_cfm={{0x10, 0x40, 0x4}, {0x8000, 0x2}}, @l2cap_create_chan_rsp={{0xd, 0x3f, 0x8}, {0x8001, 0x3, 0x5, 0xb30}}, @l2cap_create_chan_rsp={{0xd, 0x4, 0x8}, {0xffff, 0x3f, 0x3, 0x36}}, @l2cap_move_chan_cfm={{0x10, 0x45, 0x4}, {0x3, 0xfff}}, @l2cap_conn_req={{0x2, 0x0, 0x4}, {0x3, 0x3f}}]}}, 0x41) 12:07:30 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x1000000, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:30 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:30 executing program 0: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x90) r1 = signalfd4(r0, &(0x7f00000001c0)={[0x6]}, 0x8, 0x80800) sendmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000200)=@file={0x1, './file0/../file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000280)="21cb720c8a6f24016183406a8249374ac630894bfefdaec3", 0x18}, {&(0x7f00000002c0)="02f56432eeb3985dd2505189989f365670198f793c117da64b386ffbeb1ce7e02dd31e1d3789072700cce3e1d044c8efb33838ca7347afe4ae8555b1c933d4c61c1d7084509e5af2ec1bf6a98e9b598fa793828a55500beaf5ebbb402888514258140e16111370188457ac770daae6121410e366f1705ef61d13d2be97", 0x7d}, {&(0x7f0000000340)="2d57cac5c4e5935adc83f4e4a041a14ae060c025b6190459ba217e0f7001189f2c6ca6f8d9cdfa30d18c12a73bd72432b69eed1beb72ae1fddf5d6a7e399ddac616881a72dfc", 0x46}, {&(0x7f00000003c0)="c0ffcfb61a56066cbce4703408626b4bdfc895b09f4e00645ca6c5402f389e0bbebbed6c3fd35a54369090d8ff89088116e2bf3825689ee32e09fef3141f8cf4532fb34c253b39e1d2853a8b0c97cf0444be25874b179f535c21d78ee0378928874207d4be936228c3b55f75fab5689dcc221cef399d7e093573650b99897dd55b76209427f488add93ee828dad197993761456ac5f575062d70f3a932d6f89d364c9daa19e116bced48493421d916b355fe84eb9014068028f92eb01af808a6", 0xc0}, {&(0x7f0000000480)="8d81dae687208743dddd89fe0c7d3c445f16c4db4b74c356abde5b7829ef45688e4bc4baefcda87371a7897144e0f9dcf62fe6710d378e0203c8cb4e27320ddfd68724702d35c6931db703838d02ab203a04229204a21196aca3f88a07e46412dbbd61793abd13ec4049a0a500b3f59593d7c0a587645593052b5c4031c943", 0x7f}, {&(0x7f0000000500)="515bea13924daa14936755a9d33ca1f75879bbecee0100a651363a5fb80ae32e3a6337bf51ee63673a733392361a8bc44c00587c56ce81406cc1f20df1247e737a0801536cbd2b3b22d47bd3093ac978a5f77d110c2d9bc038a3e8ebc1f9e5a01c668e96a6ac0426d921310c3237ba92fa0ee9da0a7fd23c48dae29636cfc9b37fc83fb8f36d755f", 0x88}], 0x6, 0x0, 0x0, 0x10}, 0x24048801) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f04b3160308"], 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc9}, "595c6b0831b59e62925564d090d5581de436a7726ed3feb37768fcec074714a4260c823b0997d9d3767a4796e14057c22c6176cb5639010000001a813a2c402542cdf0acf0cbe35dc0b4e6bc2078a38a323da74a454ec0375a1b7685dc711fdc85edb24060e26af158c47a94333b1d0fc5a59bd0a7d874277b41ac14e84b492887aab0ea61adcee9a81e41f32f781719a36bb2a0b9507b7583390094639685274274cf3523ea7edbc2a150a03bcc79cdbb76140e6cc94ef30f4ddb81ef14e7dd589f085518092ea38b"}, 0xcd) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r3, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) pread64(r2, &(0x7f0000000680)=""/156, 0x9c, 0x7f) 12:07:30 executing program 6: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="fa43151fb4be6c04cd0400004320"], 0x7) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x1, 0x0, 0x21}, @l2cap_cid_signaling={{0x1d}, [@l2cap_create_chan_rsp={{0xd, 0x1, 0x8}, {0x9, 0x9, 0x5, 0x100}}, @l2cap_create_chan_req={{0xc, 0xf0, 0x5}, {0x7, 0x0, 0x20}}, @l2cap_move_chan_cfm={{0x10, 0x3, 0x4}, {0x6, 0x7fff}}]}}, 0x26) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@none, "5643637d7d05cec9"}}}, 0x11) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 12:07:30 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x3f00, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:30 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0xf000, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:07:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x4000000, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:07:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xfffff000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:30 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x8000000, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:30 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x30000, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:07:30 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x1000000, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:30 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xfffff000, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffff7f, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:30 executing program 0: syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040f040900432033e784d2d3f1a0c3f32d8b019f0f9b8c5b42299178f4eacd591df04f8e631122d23e9ef7e5358a7412d5c866f681ea880cd2b9aa46930e469b55547f9597d3af09"], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 12:07:30 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x30}, "06ffacaa2eca13665de605f95402bddd72f2e9c8bcb436f27797bd2355ac8359ea32ee40b372595e6663169189a3f80c"}, 0x34) 12:07:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x5000000, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:07:30 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x3f000000, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:30 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:39 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x80000, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:07:39 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:39 executing program 6: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018200000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {}, [], {}, [{0x8, 0x0, r2}]}, 0x2c, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r7, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r10, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) r12 = syz_open_dev$mouse(&(0x7f00000020c0), 0x9, 0x400000) statx(r1, &(0x7f0000000540)='./file0\x00', 0x6000, 0x100, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000080)=@file={0x1}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000100)="59a1802139826fa1792bd37641b50edab6d61877f2eabd360d2275543fbefdbcafa3903d2d0c23629d98109c551cd9edf67da229add127a26ba5bad8d2752fd8c2f6d667715a1a042eedb496b01a96a165bc4aa84e3795ba927d7165645d6fd7e95f9fb235909a89a09309b0014872217997ac2f1df1741051e5f76e556ac2ebcc2317d1ac46cd7dd6bc52e477b7c1fd", 0x90}, {&(0x7f00000001c0)="0f5a66753615d837d0925521b00d6b98344e5e24c2bcda2efe3e9bfb04cbeafbf418bb55709868cfa44fc54dd105d11a8eb45774", 0x34}, {&(0x7f0000000200)="ac14dd09305bb2d7f9f78e27ca54d91ee5360f1e7eaf610315fb382e63a9aae92df32cec9e89c11823ba9942e757ac3ccdbc8abdc8061e37f26d7b97a70273f0aab96fee535188cd5f837e420a81de9579818d9c940290909c20aa6a7c63b8ba56e2843098cde1486041b172d62fb94220f9507255f5fdc59d6681e4c258bfa5cc9d6b7de0ab714f447713c9cb399ed4f9654e0a1087d571c63756", 0x9b}, {&(0x7f00000002c0)="617c39428503f5dc31cb0bd3e5810e38a7ca1b3aaeee195ca1a78365156552d32d66950665741779857efdd7f00864d2319fc849031483e3480e8272245a282ca566050281b2b65530739cdd16d64c042e3aaea33711686a29909bef7c4da7a5ffd40cfbd083201c989d8b757af262f98b8cf7312de5da7d3171d6fab73dd37b3e73bd46cddef439a79c10e37fea6f4e9c3dbd21081b449d3cd418eb8d5bf07f1b2b3206bbec4e1fafb12f17de739d7762f4e36353a38976753c45bd47f4fc1df6d17d59b53166ef5e02e16f51388545aed42de382b446e5fcb8f3e3c77152db", 0xe0}, {&(0x7f00000003c0)="597bbf3d1d78f4b7eb9a4ab08e41fe5229baa20d3a4cf1707efa826a4564714a3b1a5ce5c75deee9b82214bdb903d6d0790083c0a47fc10838e009e4acd1b866715788db0fda43d031373d07be79e83e687c944cda705ce66e320b0c92c0e636786499b6e8a092b6d1a9ba14bbaa17cc6960f18a9fb5d026d26eb05fed9737ebafeba933e201d5c0b9e1f15df88bf7436166936eed3faf6e37bc477039b6dd706fe9efe32354658131612d73e85375444f9bef8e02a43fd05f42a4ad2c29ca3cfcbc04200f8838c830a7e3cb88e7ebcf82cc09bd53f0ca3fe36f53c935120e09c16c83fe3b4d6e34d3e51148d63cdb088d", 0xf1}], 0x5, &(0x7f0000002240)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r3, r6]}}, @rights={{0x18, 0x1, 0x1, [r0, r9]}}, @rights={{0x18, 0x1, 0x1, [r12, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r13}}}], 0xc0, 0x20004800}, 0x20000000) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) 12:07:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x6000000, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:07:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:39 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x8000000, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffff7f, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r3, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8001, 0x17}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x2044041) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000002000000eb000300", @ANYRES32=r5, @ANYBLOB="08002600a80900000800270004000000"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, 0x0, 0x800, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4055}, 0x20000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x150, r10, 0x2, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4044004}, 0x40c1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x110, r10, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x8000}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80000001}, {0x6, 0x16, 0x2}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8000}, {0x6, 0x16, 0x5}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x110}, 0x1, 0x0, 0x0, 0x1}, 0x4044054) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xfd, 0x0, 0x2043}}}, 0x7) 12:07:39 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x3f000000, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:39 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) [ 1493.802531] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:07:39 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, r2}) 12:07:40 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:40 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0xf0ffff, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:07:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x7000000, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) [ 1493.970812] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1493.971403] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 12:07:50 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x1000000, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:07:50 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffffff, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:50 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x1000}, "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"}, 0x1004) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc9}}}, 0x4) 12:07:50 executing program 6: ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000080)) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) 12:07:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xffffffff, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x9000000, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:07:50 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x3f00, 0x0, 0x0, 0x0, r2}) 12:07:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0xf, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:07:50 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:07:50 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x2000000, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:07:50 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x193, 0x20}, "85fe562795f01ec1ca7b97e81d09a7bb6df9104b7dddfd2a3d1fcba780faa7ee"}, 0x24) 12:07:50 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x9}, {0x8, 0x1, [{0xc8, 0x8000, 0x9}]}}}, 0xc) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="8caf9977c8001f"], 0x7) 12:08:00 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, r2}) 12:08:00 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, r2}) 12:08:00 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x3, 0x0, 0x80b}}}, 0x7) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x8) 12:08:00 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x3000000, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:08:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x14, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0xf000000, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:08:00 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) 12:08:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0xf, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x14, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x22, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:00 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_channel_selected={{0x41, 0x1}, {0xc9}}}, 0x4) 12:08:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x14000000, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:08:00 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x6c, 0x4}, {0x400}}}}, 0x11) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x4e}, "05ca5f5378a06db9a8bf9d39375b2b8fc53ecc16105655303fbe7041dcead26af5ab93fb031c7a1d8d91bf76e12f3c8670ff44397321c95d16ae837a44dfb2f56607a88ec67a1bc988d03b43e771"}, 0x52) 12:08:00 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x3f00, 0x0, 0x0, 0x0, r2}) 12:08:00 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x3f00, 0x0, 0x0, r2}) [ 1514.876517] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. 12:08:01 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x4000000, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:08:01 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12063, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) 12:08:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x9effffff, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:08:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x25, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:09 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x3, 0xc9, 0x5, 0x8}}}, 0x9) 12:08:09 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x5000000, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:08:09 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x3, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x20, 0x2}, {0x280}}}}, 0xf) 12:08:09 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x22, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:09 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x1000000, 0x0, 0x0, r2}) 12:08:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0xe7030000, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:08:09 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) [ 1523.606020] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1523.644557] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.7'. 12:08:09 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x8000000, 0x0, 0x0, r2}) 12:08:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0xef000000, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:08:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x180, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:09 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x81}, @l2cap_cid_signaling={{0x7d}, [@l2cap_create_chan_req={{0xc, 0x1, 0x5}, {0x7, 0x4101, 0x6}}, @l2cap_info_rsp={{0xb, 0x81, 0x68}, {0x7f, 0xe6, "bf9cf7d6dff02a104a41e809dfc2cfac08ebfca2687dd49606635dbfe31c58f3381552b75985c77c994d5f866c6383a86f6156fe4e6bd50d8608457d15a14dd42bd42690273a5f7a41ffcb10fa14a582e1c2007b8418d51ff62d3f3f91fd8a4eaabab1a4"}}, @l2cap_conn_req={{0x2, 0x5, 0x4}, {0x3, 0xfc53}}]}}, 0x86) 12:08:09 executing program 6: setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={'U+', 0x2}, 0x16, 0x1) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xfffffffffffffe5a) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x12}, "fef37a56c0f9632f4971801cbab41f4c6fd4"}, 0x16) 12:08:09 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x6000000, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:08:09 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x25, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:09 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x3f000000, 0x0, 0x0, r2}) 12:08:09 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, r2}) 12:08:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0xf0ffffff, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:08:09 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, r2}) [ 1523.868704] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.7'. 12:08:10 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x7000000, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:08:18 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x9000000, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:08:18 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x3f00, 0x0, 0x0, r2}) 12:08:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x33fe0, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:18 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x3f00, 0x0, r2}) 12:08:18 executing program 0: r0 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="d1a53eb9e2790e40e2a50e14e9bb68ea5fac7cb24bfd049fc3be1931d423cbb690f52795d5905fbbcee8b7352b028111d4fc1bebe4d298b9ae0123424c32464074782d3dcad45712bed972f6c03dcfe08750b195b3a9ed47c3f488d83f5945967d8f9796e2b72a74c843de0cf481005468281f3694f965f2bd125593bc23a729129d538274dafda0a1146e9048bfdff1fef11110a56a4f4961b74f9e1b8eb7c870ca543388c74c3fd8afffff5db4d1eb9346fe1fc4056a734382e0563b9e4288aa60bc62f23da825b361d8b0c9da454a3856d36c4a82a0bac39bcf", 0xdb, 0x0) keyctl$chown(0x4, r0, 0x0, 0xee00) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) 12:08:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0xfffff000, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:08:18 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x5e, 0xcf3402f7f29f23a6, 0x80}}}, 0x7) 12:08:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x180, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:19 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x1000000, 0x0, 0x0, r2}) 12:08:19 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0xf000000, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:08:28 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x3f, 0xc9, @none, 0x1, 0x5, 0x8, 0x3, 0x3, 0x1f}}}, 0x14) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@none, 0x81, 0xfd, "022814", 0xf2, 0x9}]}}}, 0x12) 12:08:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x33fe0, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:28 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x88020000, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:08:28 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x8000000, 0x0, 0x0, r2}) 12:08:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0xfffffdef, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:28 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x1000000, 0x0, r2}) 12:08:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0xffffff7f, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:08:28 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="f1c7401001610000bb88b9bb2007008bc74ef82040ee56c64bebd52e61ec4a0dffff"], 0xffffff0a) 12:08:28 executing program 0: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) r2 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0xfff}}, './file0\x00'}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x480080}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xb}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) 12:08:28 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0xfffffdef, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0xe, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:28 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@none, 0x1}}}, 0xa) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x34, 0x2}, {0x7e2}}}}, 0xf) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@none}}}, 0x9) 12:08:28 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x3f000000, 0x0, 0x0, r2}) 12:08:28 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x8000000, 0x0, r2}) 12:08:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0xffffff9e, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:08:28 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x9effffff, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:08:28 executing program 0: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="eba7bcc28c9353"], 0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="03c90019e7d3f4fdaf0b00006fdc0a047a8bc04d215696b88058caaef7"], 0x1d) 12:08:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0xe, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:38 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, r2}) 12:08:38 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x6, @none, 0x9c}}}, 0xb) 12:08:38 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0xf0ffffff, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:08:38 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x3f000000, 0x0, r2}) 12:08:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0xfffffff0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:08:38 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x24}, @l2cap_cid_signaling={{0x20}, [@l2cap_conn_req={{0x2, 0xf9, 0x4}, {0x1, 0xfff}}, @l2cap_create_chan_req={{0xc, 0x80, 0x5}, {0x0, 0x3, 0x3}}, @l2cap_disconn_req={{0x6, 0x7f, 0x4}}, @l2cap_move_chan_req={{0xe, 0x8, 0x3}, {0x0, 0x4}}]}}, 0x29) 12:08:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x25, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:38 executing program 6: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYRES16], 0x7) 12:08:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:38 executing program 0: fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000000)=0x3) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) 12:08:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x25, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:38 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x100000000000000, 0x0, r2}) 12:08:38 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x3f00, 0x0, r2}) 12:08:38 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_reconf_req={{0x19, 0xcc, 0x10}, {0xa5, 0x2, [0x40, 0x4, 0x4, 0x8000, 0xa000, 0x0]}}}}, 0x1d) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x1, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_rsp={{0x18, 0x1, 0x12}, {0x0, 0xff, 0xffff, 0x3, [0x9, 0x8001, 0x1, 0xfffe, 0x9]}}}}, 0x1f) 12:08:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0xffffffff, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:08:38 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0xfcffffff, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:08:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x2, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:38 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x1000000, 0x0, r2}) 12:08:38 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04010106671b6d5b5c7c2d8cfb77934578a76a6f68fe5ad0c8706c389fe99999e7eaf42283e712aae2f20d8a315de6a713e080cb4eda8f236fce659ae289e37d4d30d3957035c238cb80db36bba1af31323cf8d8857ce22f4e9e84caec72b1b0a7e718e3869f4214edaa8b90834a5c882df545efefcd06d168dbffe747bafbfe87fe7815c47d404ee3e116faad5da1a6440e7fb1c95ba0058613a50d02f58ffac7fa27e360a44eb9d35b7334a7c418f8bc5fc0e36aa3d54fe7e28b1556fa0412"], 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0x0, 0x3c}, "3f2db056f719746f229f65979798541f80507f0773fd2e2331c99aaf553c0bc78c1b5f41fb4afa1fde3a156751885ce3924351cc6129d96a8f3c1efb"}, 0x40) 12:08:38 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x800000000000000, 0x0, r2}) 12:08:47 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x3f00000000000000, 0x0, r2}) 12:08:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:08:47 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x8, 0xc9, 0x3}}}, 0x8) 12:08:47 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0xfffff000, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:08:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x3, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:47 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x8000000, 0x0, r2}) 12:08:47 executing program 0: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040fe210f30434204320"], 0x7) 12:08:47 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xd163b44156906887, 0x1, 0x2, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_rsp={{0x7, 0x7, 0x4}, {0xd7, 0xe539}}]}}, 0x11) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xff, 0xc9, 0xf7}}}, 0x7) 12:08:47 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:08:47 executing program 0: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_cmd_rej_unk={{0x1, 0x3, 0x2}, {0x9}}}}, 0xf) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc3}, "b7fe4f1615ee5ae5184a001bdefcbb5af1e96a1682b6819e65d2c34cf5770e687015bf98959b23edcb65e0f724e431604e94602d494b942ca81ea02d504a448eb5e9c0baee4d09c0ef9c329b54130147a438b05b1285120ee92c55dbe6daf18accb040bab971a419700b27a2f72f458ee8d00e591f003838c9a8222f09fc498e5613c8cc2ef2d40fb89960c0b7eec7ef12eca14ac1ec5653e6f10949caeac140ba7cb823adfc29f3fff621450a6f4fa248a4473c37bd6eeb1f6b7430d41c21a4ea6be2"}, 0xc7) 12:08:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x4, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x2, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:08:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x3, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:08:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x5, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:57 executing program 0: syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c95043003f00010005051d008100000008000409032405ff0f2c007f0005010105010101e78863058b1c00040008000300050100040903007fff01ff03080007020500020203006a961976c8bad5aff81052608de668c71e0cfc1cc540f9c04fe16c0d746c91a30516347788b63fdb5b18abef094260875a8023e7ca52402b978387b0f91add0bd9793fa327cb3146de6d97d4e167764f00ee4162b6ac1621b7cd462021db05427439f84303b1369536d253f8c9222e61a4ba3ed8809d2bafe0c40f81c3f5674f89ae0878608bb741ce0ce9b3e074ccfd1cf4cdafef540437a14f124e0122092390ccb7c121af3dfdfbe502a1a35aeb39a2"], 0x48) syz_emit_vhci(&(0x7f0000000280)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xc0}, "dd789d1b0045fba00edfce76dddae506299d90fad4041c57fcb15419980e7c6043ed27a702a113a6223e351c02ee2ea82c990c1e2c4c135061bb3592c3f97e170aa47eeef3d91f9d128ceb92ccd277047db7c395746d9398d12cb02be037cca6e1db330954a722fa67ec80f7ff9ce27e0dd7d484b5462372a3c30fdbcfb315734aed893d0dc026699089c2b92e9097e233492908ba12e2ecba6d49873a2c2b9f04540f41dd6bac2a887a53e7aa2b57b928857b9354ce9de95828c2c06774eb35"}, 0xc4) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043406ffffffffffffd5a4ffd60555f6ebbb014e8f554570a717bdb463da1ebe86a98ac48cb6222ff074cf2213c77de3bb1fe26aa3ac0b8887a9923cb809b4f9844531803e0b29b8af403443b534027832c1ed9d9536a4eac7e8aa44925159feb8ae3ed49fa02bd7d4f380de83ac00045256ae2c72366eaf44c00c7d307dbdcc8b79e8"], 0x9) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 12:08:57 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x2, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:08:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0xffffff7f, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:08:57 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0xff}, {0x1, [{@none, 0x4, 0x2, "c4819f", 0x5, 0x1, "63da14beb48bc419143909017107bbac5adc2f4227d956fcd6d711c7e22e7879fb5de4467e569f099633e592db4ead9a6b2a86e058fa5a2eafcc155be3da1024de79de4764e201737a5fa47b25a802dbd0cc69a9869c2d0e8c0f9a3b6d63eaa6a43a30444e8eccdd140c46253659a9b365dcbf253ba3ae471f5c1850868e15619afc32f8f9496b37a91e5c5c44c7afa7202d725994051520661d4533359cd1a9e31ed14de078c57441b310b8987780a7b9efe7146cb09c90472bebef4f2d25a8063e4ba645da0ecaccf352ce741b19d2c2c74bec62a9593dc57c14e46bd6538363619f2e55dfb87fc2c5b2d4dd5f32e6"}]}}}, 0x102) 12:08:57 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, r2}) 12:08:57 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x3f000000, 0x0, r2}) 12:08:57 executing program 6: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x2, 0x408202) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r2, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}]]}, 0x2c}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0}, {0xffffffffffffffff, 0x2402}, {r1, 0x400}], 0x3, &(0x7f0000000100)={r4, r5+60000000}, &(0x7f0000000140), 0x8) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) 12:08:57 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x100000000000000, 0x0, r2}) 12:08:57 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0xffffff9e, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:08:57 executing program 0: syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040)=@random="402fc99b3fbfbd9f0d5dee02a648c8935bd91e", 0x13, 0x0) mlockall(0x7) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) 12:09:07 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x800000000000000, 0x0, r2}) 12:09:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x4, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:09:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x6, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:09:07 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 12:09:07 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x13}, @l2cap_cid_signaling={{0xf}, [@l2cap_create_chan_req={{0xc, 0xd2, 0x5}, {0x3, 0x200, 0x6}}, @l2cap_cmd_rej_unk={{0x1, 0x81, 0x2}, {0x1}}]}}, 0x18) 12:09:07 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3f00, r2}) 12:09:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x3, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:09:07 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0xfffffff0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:09:08 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000000, r2}) 12:09:08 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x4, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:09:08 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "904e956eb0cc9b52"}}}, 0x11) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x0, 0xa}, {0x2, 0xfe0b, 0x5, 0x2, 0x1}}}}, 0x17) 12:09:08 executing program 0: syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7}, "ebafccf80d5b31"}, 0xb) 12:09:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x5, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:09:08 executing program 6: syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="b9648664004320"], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "1f8055", 0x1}}}, 0xd) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x81, 0xc8, 0x0, 0x8, "aaaedd0673f61061"}}}, 0x10) 12:09:08 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000, r2}) 12:09:08 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x3f00000000000000, 0x0, r2}) 12:09:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x7, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:09:08 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0xfffffffc, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:09:08 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3f000000, r2}) 12:09:08 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r2}) 12:09:08 executing program 0: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_rsp={{0x7, 0x74, 0x4}, {0x7, 0x3}}]}}, 0x11) syz_emit_vhci(&(0x7f0000000080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x35}, "3edc638f9a015eb94fb664484ef71a26b0fb47829da7cb427c915635a8b20a2e3c6da24f9a73c7987ff8b210ed09df80f649d50a7c"}, 0x39) 12:09:08 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x5, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:09:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x6, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:09:08 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0xffffffff, &(0x7f00000003c0)={&(0x7f00000005c0)={0x18, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:09:08 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, r2}) 12:09:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x8, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:09:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x7, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:09:19 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r1, 0x5, 0x6, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) 12:09:19 executing program 6: syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x2043}}}, 0x7) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x103b}, @l2cap_cid_signaling={{0x1037}, [@l2cap_move_chan_req={{0xe, 0x1, 0x3}, {0x808, 0x40}}, @l2cap_conn_req={{0x2, 0x9, 0x4}, {0x1, 0x9bc}}, @l2cap_conn_rsp={{0x3, 0xfb, 0x8}, {0xf03e, 0x1, 0x6, 0x3}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x7, 0x2}, {0x4a7}}, @l2cap_info_rsp={{0xb, 0x0, 0x1004}, {0x6, 0x8, "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"}}, @l2cap_move_chan_cfm={{0x10, 0x1, 0x4}, {0x0, 0x7}}, @l2cap_info_req={{0xa, 0x8, 0x2}, {0x4}}]}}, 0x1040) 12:09:19 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3f00, r2}) 12:09:19 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0xf, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) 12:09:19 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x1, 0x89) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00'/10]) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x20, 0x2d, 0x0, 0x1, [{0x19, 0x0, @random="6d40ba70764bde627a89b2faf9091953a6c4a125d0"}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x200008c1}, 0x40000) inotify_add_watch(r0, &(0x7f0000000080)='./file1\x00', 0x10000918) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x2043}}}, 0x7) 12:09:19 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r1}) 12:09:19 executing program 0: syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x9) 12:09:19 executing program 6: syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x2, 0x3f}, @l2cap_cid_signaling={{0x3b}, [@l2cap_disconn_rsp={{0x7, 0xff, 0x4}, {0xffff, 0x15e6}}, @l2cap_cmd_rej_unk={{0x1, 0x81, 0x2}, {0x7fff}}, @l2cap_conf_rsp={{0x5, 0x81, 0x20}, {0x9, 0x7, 0x1ff, [@l2cap_conf_mtu={0x1, 0x2, 0x9}, @l2cap_conf_efs={0x6, 0x10, {0x0, 0x0, 0xfff, 0x800, 0x5, 0x1}}, @l2cap_conf_mtu={0x1, 0x2}]}}, @l2cap_create_chan_req={{0xc, 0x1f, 0x5}, {0x4, 0x0, 0x7}}]}}, 0x44) 12:09:19 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x10000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='1\x00', @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r3, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@generic={0x8, "4e16a1777c81c888584d49df5383a43b5e0f8b08d0e412536fbb498150451bf1efdb63cbd3fefc67b245124fcc54b6a01de3ddafccce8a842563edeb4706f9e3df005fc4cb5ad6d9471bb3e8a4701008584e0da75b1dc6641c2d2b45a37dbcc7d7bf71f4e311cfabf51f583e48c17ef87e000a08b000f5041a41fd5880a1"}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)="c116578337203836bd3e996f7ca72ce591193c47eccb386837ce0d4a2a54d297ddb68391100bf9c33d3cc93f95e3b99b98d7f837a78959bc2bc48c12ef0e47aa22838704cb1edfb5e235ff6de787a025edf370b9c9256bf805d6ac5ad33f4d18db7ecbd6ee062041afc6ea427ec943951597680998489e43d0a4ee57b5d986bf512d189ae61c9d9aae6fd95c5e0c867808c9ba604106a40beec0cdc4557537ab7c38a3346c47a0bd3758020cc2c9583f813047b57d73212dc834ff26742faf57f7cec578c10d", 0xc6}, {&(0x7f0000000000)="d5bf4835329e0945b1fa5aa43d", 0xd}], 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1d8}, 0x0, 0x810}, 0xfffffff7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@mcast2, @loopback, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, r6}) 12:09:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x5, 0x0, 0x8, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x0) 12:09:19 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x14, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0) [ 1593.597665] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1596.309253] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1596.312618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1596.315439] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1596.321773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1596.326392] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1598.407099] Bluetooth: hci0: command tx timeout [ 1600.454104] Bluetooth: hci0: command tx timeout [ 1602.502456] Bluetooth: hci0: command tx timeout [ 1604.551366] Bluetooth: hci0: command tx timeout [ 1613.700768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1613.702300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1613.754162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1613.755222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1622.575154] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff88801f442c00 (size 64): comm "kworker/u11:1", pid 291, jiffies 4295201673 hex dump (first 32 bytes): 70 ce 73 1b 80 88 ff ff 70 ce 73 1b 80 88 ff ff p.s.....p.s..... 80 ce 73 1b 80 88 ff ff 80 ce 73 1b 80 88 ff ff ..s.......s..... backtrace (crc 183e2b53): __kmalloc_cache_noprof+0x445/0x6b0 hci_inquiry_cache_update+0x487/0x810 hci_extended_inquiry_result_evt+0x3e7/0x770 hci_event_packet+0x9dc/0x10e0 hci_rx_work+0x96c/0x1270 process_one_work+0x8e1/0x19c0 worker_thread+0x67e/0xe90 kthread+0x3c8/0x740 ret_from_fork+0x38b/0x470 ret_from_fork_asm+0x1a/0x30 BUG: leak checking failed VM DIAGNOSIS: 12:09:55 Registers: info registers vcpu 0 RAX=00000000004b7b65 RBX=0000000000000000 RCX=ffffffff84c4ac97 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814cbdd0 RBP=dffffc0000000000 RSP=ffffffff85c07e00 R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001 R12=ffffffff86645d50 R13=1ffffffff0b80fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84c4998e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e53f9000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe46d8ed28 CR3=000000001e69c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=3a29343620657a697328203030633234 XMM03=31393220646970202c22313a3131752f XMM04=63203038202020200a2e2e2e2e2e732e XMM05=20383820303820623120333720656320 XMM06=31203337206563203037202020200a3a XMM07=20706d75642078656820200a33373631 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=00000000009f9255 RBX=0000000000000001 RCX=ffffffff84c4ac97 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814cbdd0 RBP=dffffc0000000000 RSP=ffff8880096efe58 R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001 R12=ffffffff86645d50 R13=1ffff110012ddfd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84c4998e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e54f9000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd74c46c4d0 CR3=000000001e69c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e XMM02=3a29343620657a697328203030633234 XMM03=31393220646970202c22313a3131752f XMM04=63203038202020200a2e2e2e2e2e732e XMM05=20383820303820623120333720656320 XMM06=31203337206563203037202020200a3a XMM07=20706d75642078656820200a33373631 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000