)=""/70, 0x46}, {&(0x7f0000000400)=""/35, 0x23}], 0x4) r6 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000600), 0x20000, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x80) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) sendfile(r1, r6, &(0x7f0000000580)=0xffffffff, 0x7) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000200)) sync() 16:40:20 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x200, 0x0, @remote}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000000), 0x4) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000540)="ae98d7aa", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r2 = epoll_create1(0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f00000000c0)=0x1) [ 173.197532] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 16:40:21 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) flock(r7, 0x2) clone3(&(0x7f0000005880)={0x14f824100, 0x0, &(0x7f0000000280), 0x0, {0x1f}, 0x0, 0x0, &(0x7f0000000080)=""/1, 0x0}, 0x58) 16:40:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) openat(r1, &(0x7f00000001c0)='./file0\x00', 0x80000, 0x142) write(r0, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) fcntl$setstatus(r0, 0x4, 0x44000) sendfile(r0, r2, 0x0, 0xfdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) 16:40:21 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, 0x0) r0 = pidfd_open(0x0, 0x0) pwritev2(r0, &(0x7f0000000640)=[{&(0x7f0000000000)="5f55f907024b0101ab10da2b0d70ac5f2bf0e3770e24b1abcd2e58885283ff9a2cfb6b9541925bb1570d28ce28d59ba89942dc599506a376a134d31dba1bf212ae37102cd9e5f3abfa2b4a981b1cc0c1556b77d416884c142655cdbe", 0x5c}, {&(0x7f0000000100)="27c92887c93e7a516abd7aa84ef23a029b0ba077d04c60f795eb69d9df910e6963a53c471f0560360c9781dbbf0394cf6119438a6834d543512ec58770539b7c10bfd6ab670d08b79c017fbe416c4e3a5a02d5366bcee9c22b21bb5ad889907f29c60f95d42198a69fe1118bc6a917a39719325f0232accdb82cec5ffbc686f38757cf6468dc9071577f853c5174a3ff980ba2", 0x93}, {&(0x7f00000001c0)="aa031443c4a8d4a428d5ba4f6ce502b3e494d6fc21dc28023eca12b53a4bae2d0f50927415cdf43c83a052c7719763afabfdbba1e1a6dafeb9e66b79d2930fb949e5bed6aa54eba246127c2c67d06aaa795d4a922232c88ad384d9a53489a872964a0401eb8f0218866fc283cb2364d579244e668af45dc48c8be71e629773997e46c949c178bfff7a704694af37ac58b256c77b9aab5700f3292f8d4488bdbdf0f2befb7319f50b975072f08ea5", 0xae}, {&(0x7f0000000280)="9fd0384078584c7afbdb2bc4f0116fbed9b974ee1825b76a1bc1ac95d453a222788c355856cd7f0a527305d0a5c73880205130db370b989773a455b6daf42d66e85a23d68fc4df641f070cd58ef79cf9060185305fe219f894c0fbe419c075847b3dff24402d3a3043538ea5c5377e709e8c543e64ef17625778ad69b33a42", 0x7f}, {&(0x7f0000000300)="3a8d8614521027bb8a54a42bce9d3e4fd48e31d5dbc19a23a39d8419ff7afd8450084e60296503ab0032ca7fc2746766e1f0ad3a0af42fe32e9e3c8bf37397f515db179c73c5e69ab3664332888625f27dbf1347e1c427b7e28af8d805f4309dd6718fa0959a230a897109cdb2fc28f7fc4eb76672f305d7669d70", 0x7b}, {&(0x7f0000000380)="9cece9460c3511cb58a5de6762bcdddc93c52506ff6d8edfa2c504b28d2e8cc12896341c3d0b5fba052661246520b39ab864f50e37e7dce86ef7b04cf0ab276f8db7d20b9a3aa068f98ce7e01f0fc971b7171fab46e35f5c75dedeb73d9c00539607804372cc31545396963150e7aa38af9df959fdc9beb9590a62247ae6cf250f809ddf040d06baf971aa0d6ce5e70f674d679a894c9b46977e8beebc80bb40f5bed510dfa678da5aa6c5c3a733c4028f", 0xb1}, {&(0x7f0000000440)="dcf289ff205317e5347e64574a6487be19b079d407e51e7a4c699b43060c0be2cf53201317ad0c4bcaf2dd8641c7d323991101c82fa18a7599b122ebb306482a5d32e6a8174f7159dcb3471047ba1a2f164139f7ccab0cf045e2f8edb59dd8794925bc808ddb7001cb3736012afa501a64c4fa19c7c0289b2526acd28a7158acdc3c85d0009ad599d1bed3096233fea16537db0618fb3c380aad9b1a2d882beb01a6d2f0dbe91a8d35ae8e6941f0589804925d5b37a1a2cec9ac5ad90c0af699682a374c15002b6a84f30a23c4e5f550277cd4102c5fda07ecb267f076405bd5ea9ca5795e4f288501994cd0698a24f65e68b1ba4ea45419e6", 0xf9}, {&(0x7f0000000540)="417aee35f3f89e0d9a558adf831cb73f408e6589271622cd52aff8dd1db3ef02e49fa3ebad3012d14db44ed1b48f18bdbe409991f7226448cea101b076998f1bd5155505f874d39bebd23e0f8f982c1f70030f968b8797e95317823cd89f28ae7629abc869213669dbfb49487c395690e3cb78ef15bceaa21b4142b33354bd5bf4a7b96461468821d1a94a20742b1bdd6f60e3e84d72d7a9da890cdf6784bbfb015f81b507d82be1dd7e99ad9aae5e370616ce382012712a95b9507c4a128a212e66", 0xc2}], 0x8, 0x401, 0x7, 0x1) mq_open(&(0x7f0000000080)='\':.@.\x00', 0x40, 0x0, &(0x7f00000000c0)={0x8, 0xffffffff, 0x6, 0x3489d84f}) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000001240)={0x1, 0x7, 0x1, 0xfffffffa}) 16:40:21 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) 16:40:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r1, 0x21, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x240400d0) 16:40:21 executing program 6: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/51, 0x33}], 0x0, &(0x7f0000002480)=[{&(0x7f00000013c0)=""/4105, 0x1009}], 0x1, 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000300)) r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/igmp6\x00') write$P9_RREAD(r1, &(0x7f0000000000)={0x30, 0x75, 0x0, {0x25, "09ecc1f2ec95ad11d7b8376ef52c967c5e152255f037e52f63af82783ec80cbbfbc18e4859"}}, 0x30) [ 176.148776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.157219] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.162401] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.168108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.172285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.250030] Bluetooth: hci1: command tx timeout [ 180.297307] Bluetooth: hci1: command tx timeout [ 182.344097] Bluetooth: hci1: command tx timeout [ 184.389909] Bluetooth: hci1: command tx timeout [ 193.399057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.400461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.481908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.483073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.587752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.593488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.598107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.605969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.920263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.925480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.926544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.931778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:40:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={0x92682, 0x20, 0x6}, 0x18) 16:40:52 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000012c0), 0x440, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0xa, 0x6, 0x4, 0x0, 0xc, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000100), 0x6}, 0x11890, 0x2000000001f, 0x7fff, 0x9, 0x6, 0x3ff, 0x7, 0x0, 0x9, 0x0, 0x1}, r1, 0x10, r4, 0x4) r5 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r5, 0x8, &(0x7f0000000300)) r6 = fork() r7 = fork() kcmp(r6, r7, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) getpid() clone3(&(0x7f0000005880)={0x14f824100, 0x0, &(0x7f0000000280), 0x0, {0x1f}, 0x0, 0x0, &(0x7f0000000080)=""/1, 0x0}, 0x58) 16:40:52 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x17, 0x2b8f02) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = syz_io_uring_setup(0x52bf, &(0x7f0000000100)={0x0, 0xdf5d, 0x1, 0x1, 0x145, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000180)) r2 = epoll_create1(0x0) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r5 = dup2(r3, r4) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="c900000003000000fc010000a8bab565eea368fba58fc2d2583800b15b16a703748d2eb65be97b400664584d842328ab38bafe9a90cd28fc1a9e53c0451556c7b449830bac3e64653f00572a38b9fa380c87cf3ba8d6f2fb601edecf5acc0bebce9a4fb51c9ccaf89d2c47419c31ac3bdaac97fc9adbfa274182ac96929ff9c5fd8bd81ddc2ebaa153799019e1a661fe0ee1150996b10ddb8e74ddf9f74d3d8d83b06fae8d0e46e34b3b7234d3d6328c577f4e830b852394ce41ea41da28e95183d308ff3c3976eeac7b46912c3539ee6bbf738821"]) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz1\x00', 0x1ff) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/209, 0xd1}, {&(0x7f0000000340)=""/26, 0x1a}, {&(0x7f0000000380)=""/70, 0x46}, {&(0x7f0000000400)=""/35, 0x23}], 0x4) r6 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000600), 0x20000, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x80) copy_file_range(r7, 0x0, r6, 0x0, 0x0, 0x0) sendfile(r1, r6, &(0x7f0000000580)=0xffffffff, 0x7) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000200)) sync() 16:40:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2c, r1, 0x21, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x240400d0) 16:40:52 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) fallocate(0xffffffffffffffff, 0x4, 0x401, 0x3f) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r2 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r2, &(0x7f0000000000)=""/159, 0x9f, 0x200000) bind$unix(r2, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r3 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x3, 0x1, &(0x7f0000000340)=[{&(0x7f0000000240)="ca350c152591202c44d1f14342aeb61fed65f2dac1dd007d16ca994b89823c4b4bdf1959f9ba83353095b11901fcb4dfd381a48daae6f7a42638ccbb06e020306fe881ae9c1a849951a575633d23767aa53fa3d605c58b7bd964d5be5a34b142d5abf536c170ab565c9bb88cfe54bed573b29afb3372fffe00dc3c8c526000cbfd8cd2f0f6c4e0acfff24d8314fbcfad4dd4e56c531856bbf4e1", 0x9a, 0x5}], 0x1, &(0x7f0000000380)={[{@dots}, {@nodots}, {@dots}, {@dots}, {@dots}, {@nodots}], [{@smackfstransmute={'smackfstransmute', 0x3d, './cgroup/syz0\x00'}}, {@uid_lt}, {@obj_role={'obj_role', 0x3d, '!'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}]}) move_mount(r0, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000400)='./file0\x00', 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff) sendfile(r0, r1, 0x0, 0xfdef) 16:40:52 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) flock(r7, 0x2) clone3(&(0x7f0000005880)={0x14f824100, 0x0, &(0x7f0000000280), 0x0, {0x1f}, 0x0, 0x0, &(0x7f0000000080)=""/1, 0x0}, 0x58) 16:40:52 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @broadcast, @from_mac=@broadcast, {0x1, 0x5}}, @ver_80211n={0x0, 0x6722, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x16, 0x0, {0x0, 0x13, @random="d480d52ccdb0910352e35c292400773d5bf8c4"}, @val, @val={0x2d, 0x1a, {0x422, 0x0, 0x0, 0x0, {0xc3, 0x73, 0x0, 0x176, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x800, 0x1, 0x5}}, [{0xdd, 0xb9, "c57875a7acbe4e59ce70986fae067deaa53b996cb69e1daafc53e7f4ca5667daa40b1b5a8eb92dea9ed87c10b6a9de7327f6068c48a6f68e6d465b136ee8c8e59607a924b612a3b3b02b5110803135353d9482df34828467aaca553bac4f32f1987c2afb271918acaf53e687b8025837bc89e320a6cf0fc99170f2e846848d30e2d8dbe7767804a98ebe774d7b2dcc3747801d477f84a04fdc18de41014ddef5265f481af6d7290dfe833e32a9c78a1168a64e8dab04b97f05"}, {0xdd, 0x10, "3c03e43a47c0eb067d472cc1b4f550a2"}, {0xdd, 0xe7, "08db6770327432589f730c3b467daf70ef618756ee5db42b8ac806b031670cd05726825fffcafdecbc2d9d6f965e3eba4bd0f363120f6a629bc61f6ec96906b8cb43a790ab3c14c1f423eb13b485c947c5e5551b300e449217301214d46af37fba6643cca855f033e7c3b90e39d7aee7b32c8acadf0ddc71cf94f9438580ebb98e4441d43b3b4fbf93603b38cda1c5b1bc1f169431a9e94562b74c999a20e4b639295d7dbbfde30d1076175de5ad1b1b066522dc4bb67d614f7eeae933c956d24675c29d2c8e8df94883ddca17c9a702fc0bdaf421baef827495e19bd8d8eeedfd28d96848b38e"}]}, 0x209) syz_80211_inject_frame(&(0x7f00000023c0), &(0x7f0000002400)=@mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_b, @random="9618d2b3407f", {0x3, 0x7}}, 0x15, @void}, 0x1a) 16:40:52 executing program 4: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x48, &(0x7f0000000000), 0x4) 16:40:52 executing program 6: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @broadcast, @from_mac=@broadcast, {0x1, 0x5}}, @ver_80211n={0x0, 0x6722, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x16, 0x0, {0x0, 0x13, @random="d480d52ccdb0910352e35c292400773d5bf8c4"}, @val, @val={0x2d, 0x1a, {0x422, 0x0, 0x0, 0x0, {0xc3, 0x73, 0x0, 0x176, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x800, 0x1, 0x5}}, [{0xdd, 0xb9, "c57875a7acbe4e59ce70986fae067deaa53b996cb69e1daafc53e7f4ca5667daa40b1b5a8eb92dea9ed87c10b6a9de7327f6068c48a6f68e6d465b136ee8c8e59607a924b612a3b3b02b5110803135353d9482df34828467aaca553bac4f32f1987c2afb271918acaf53e687b8025837bc89e320a6cf0fc99170f2e846848d30e2d8dbe7767804a98ebe774d7b2dcc3747801d477f84a04fdc18de41014ddef5265f481af6d7290dfe833e32a9c78a1168a64e8dab04b97f05"}, {0xdd, 0x10, "3c03e43a47c0eb067d472cc1b4f550a2"}, {0xdd, 0xe7, "08db6770327432589f730c3b467daf70ef618756ee5db42b8ac806b031670cd05726825fffcafdecbc2d9d6f965e3eba4bd0f363120f6a629bc61f6ec96906b8cb43a790ab3c14c1f423eb13b485c947c5e5551b300e449217301214d46af37fba6643cca855f033e7c3b90e39d7aee7b32c8acadf0ddc71cf94f9438580ebb98e4441d43b3b4fbf93603b38cda1c5b1bc1f169431a9e94562b74c999a20e4b639295d7dbbfde30d1076175de5ad1b1b066522dc4bb67d614f7eeae933c956d24675c29d2c8e8df94883ddca17c9a702fc0bdaf421baef827495e19bd8d8eeedfd28d96848b38e"}]}, 0x209) syz_80211_inject_frame(&(0x7f00000023c0), &(0x7f0000002400)=@mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_b, @random="9618d2b3407f", {0x3, 0x7}}, 0x15, @void}, 0x1a) [ 204.917590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.942514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.964021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.984297] msdos: Unknown parameter 'smackfstransmute' [ 205.003955] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.015532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.034598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.065200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:40:52 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c20100120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32373131373433303500"/192, 0xc0, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040000c00000000000000d3f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000004400000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000010500)="ff000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d3f4655fd3f4655fd3f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000020000000", 0x40, 0x2400}, {&(0x7f0000011700)="200000004c7ddc8f4c7ddc8f00000000d3f4655f00"/32, 0x20, 0x2480}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040000000", 0x40, 0x2800}, {&(0x7f0000011900)="20000000000000000000000000000000d3f4655f00"/32, 0x20, 0x2880}, {&(0x7f0000011a00)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000050000000", 0x40, 0x2c00}, {&(0x7f0000011b00)="20000000000000000000000000000000d3f4655f00"/32, 0x20, 0x2c80}, {&(0x7f0000011c00)="c041000000380000d3f4655fd3f4655fd3f4655f00000000000002004000000000000800000000000af301000400000000000000000000000700000030000000", 0x40, 0x4800}, {&(0x7f0000011d00)="20000000000000000000000000000000d3f4655f000000000000000000000000000002ea00"/64, 0x40, 0x4880}, {&(0x7f0000011e00)="ed4100003c000000d3f4655fd3f4655fd3f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000b65c7bf3000000000000000000000000000000000000000000000000200000004c7ddc8f4c7ddc8f4c7ddc8fd3f4655f4c7ddc8f0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4c00}, {&(0x7f0000011f00)="ed8100001a040000d3f4655fd3f4655fd3f4655f00000000000001004000000000000800010000000af3010004000000000000000000000001000000600000000000000000000000000000000000000000000000000000000000000000000000000000005a0e0125000000000000000000000000000000000000000000000000200000004c7ddc8f4c7ddc8f4c7ddc8fd3f4655f4c7ddc8f0000000000000000", 0xa0, 0x5000}, {&(0x7f0000012000)="ffa1000026000000d3f4655fd3f4655fd3f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3237313137343330352f66696c65302f66696c653000000000000000000000000000000000000000000000b8e8b49f000000000000000000000000000000000000000000000000200000004c7ddc8f4c7ddc8f4c7ddc8fd3f4655f4c7ddc8f0000000000000000", 0xa0, 0x5400}, {&(0x7f0000012100)="ed8100000a000000d3f4655fd3f4655fd3f4655f000000000000010000000000000000100100000073797a6b616c6c65727300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008b63b3ec000000000000000000000000000000000000000000000000200000004c7ddc8f4c7ddc8f4c7ddc8fd3f4655f4c7ddc8f0000000000000000000002ea040700000000000000000000000000006461746106015403000000000600000000000000786174747231000006014c0300000000060000000000000078617474723200"/256, 0x100, 0x5800}, {&(0x7f0000012200)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d3f4655fd3f4655fd3f4655f00000000000002004000000000000800010000000af30100040000000000000000000000050000007000000000000000000000000000000000000000000000000000000000000000000000000000000044cd9848000000000000000000000000000000000000000000000000200000004c7ddc8f4c7ddc8f4c7ddc8fd3f4655f4c7ddc8f0000000000000000", 0xc0, 0x5be0}, {&(0x7f0000012300)="ed81000064000000d3f4655fd3f4655fd3f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c4794644c000000000000000000000000000000000000000000000000200000004c7ddc8f4c7ddc8f4c7ddc8fd3f4655f4c7ddc8f0000000000000000000002ea04073403000000002800000000000000646174610000000000000000", 0xc0, 0x6000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x63c0}, {&(0x7f0000012500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000012600)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x18000}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x18800}, {&(0x7f0000012800)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x19000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x19800}, {&(0x7f0000012a00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1a000}, {&(0x7f0000012b00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1a800}, {&(0x7f0000012c00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1b000}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x20000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x20400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x20800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x20c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x21000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000200"/96, 0x60, 0x21400}, {&(0x7f0000013300)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x28000}, {&(0x7f0000013400)="0200"/32, 0x20, 0x28400}, {&(0x7f0000013500)="0300"/32, 0x20, 0x28800}, {&(0x7f0000013600)="0400"/32, 0x20, 0x28c00}, {&(0x7f0000013700)="0500"/32, 0x20, 0x29000}, {&(0x7f0000013800)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000200"/96, 0x60, 0x29400}, {&(0x7f0000013900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}], 0x0, &(0x7f0000013e00)) getdents(r0, &(0x7f0000000600)=""/246, 0xf6) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)='\\\x00', &(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='ext4\x00'], &(0x7f0000000780)=[&(0x7f0000000700)='ext4\x00', &(0x7f0000000740)='ext4\x00']) 16:40:53 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x96) pread64(r1, &(0x7f0000000180)=""/249, 0xf9, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r0, 0x46c, 0x100, 0xffffffff}) r3 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', 0x9, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000280)="134247937b89c830a7966aadc49670a231dd4bbd1e801b27053f68a4117fb76b8eeef5d2cfc92533414926097ef7d9efc31d346688c2b287914b1104de78d25324f7e7d05cbab4ed2ea3b83a1cd72cb63352d9d5b6ffc5f857d7", 0x5a, 0xd75}, {&(0x7f00000003c0)="bb9991eb2c810a4ac98094d183e670540e17742dd0bb0cabd6b9232ec0c45beb12cfba17be71fc3c17307ca6ebf74833771404487a074832b065174740a1d4df6c64efde7433978bee04b60ff18fa81b2ddeaea5d9a665a3c0f47f1895bac693ed5dae8dd0270c530ba1dceb5c67a8166d25249ea532f7ffd99c8f572acae1372f51c1f7044f0480abc3970474cd95d8b5c45503070aa8c35f63bb35a4d040f6cc62961ca7", 0xa5, 0x8}, {&(0x7f0000000300)="9c921aad083df3110a8d0b5b03321b3bcbd02c0981e4add04db454bcf396388b4dec4f50304dd16b0622367ecd1c9f04b322553df107037f5158ba98b63dedeba3972e9967", 0x45, 0x1400000000}, {&(0x7f0000000480)="81c7310b3afc2eb9affd1c28b9199cd0e898ed212355d9a8a70ec179c422284231b5b65258b7eff2d1c1de8480b994e1478824ebed65d2b6b8d1de439d98acdcf059a597c303d8807821b2698217c695887ba90e9238418ba7e36f3784c5bb119f867a0ca7a3867d189ba43687edda5e220adbc2e5731ac041f0b22698eca2bcd7f106b09fd450766401e13b8111f592130aa641e3dcbcde88bb7b59dce97c6de65e00e75c8943d42926488e8cc7d4e5a4200c61b6a5957bdd566203", 0xbc, 0x1ff}, {&(0x7f0000000540)="7ac3153d6d422dee1964abfe3f7995f496a97ccd1fcca67a669a37ef48c4134d06c32c81392e2db1af65b9b6ec3b0cd985d6875574561fd3b1b79697012eea2aaa233009ab0b1a7ae636a95eb2a57cc8587d49e1b53c85", 0x57, 0x100}], 0x3a00001, &(0x7f0000000680)=ANY=[@ANYBLOB='dots,fowner>', @ANYRESDEC=0xee00, @ANYBLOB="04408dafd3193fb6b6fa2c02"]) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000640)={0xa0000010}) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x101) [ 205.121771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.151929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.190514] loop4: detected capacity change from 0 to 2048 [ 205.251693] loop0: detected capacity change from 0 to 20480 [ 205.288808] msdos: Unknown parameter 'fowner>00000000000000060928@?' [ 205.312091] loop0: detected capacity change from 0 to 20480 [ 205.313716] msdos: Unknown parameter 'fowner>00000000000000060928@?' [ 205.352143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. 16:40:53 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @broadcast, @from_mac=@broadcast, {0x1, 0x5}}, @ver_80211n={0x0, 0x6722, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x16, 0x0, {0x0, 0x13, @random="d480d52ccdb0910352e35c292400773d5bf8c4"}, @val, @val={0x2d, 0x1a, {0x422, 0x0, 0x0, 0x0, {0xc3, 0x73, 0x0, 0x176, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x800, 0x1, 0x5}}, [{0xdd, 0xb9, "c57875a7acbe4e59ce70986fae067deaa53b996cb69e1daafc53e7f4ca5667daa40b1b5a8eb92dea9ed87c10b6a9de7327f6068c48a6f68e6d465b136ee8c8e59607a924b612a3b3b02b5110803135353d9482df34828467aaca553bac4f32f1987c2afb271918acaf53e687b8025837bc89e320a6cf0fc99170f2e846848d30e2d8dbe7767804a98ebe774d7b2dcc3747801d477f84a04fdc18de41014ddef5265f481af6d7290dfe833e32a9c78a1168a64e8dab04b97f05"}, {0xdd, 0x10, "3c03e43a47c0eb067d472cc1b4f550a2"}, {0xdd, 0xe7, "08db6770327432589f730c3b467daf70ef618756ee5db42b8ac806b031670cd05726825fffcafdecbc2d9d6f965e3eba4bd0f363120f6a629bc61f6ec96906b8cb43a790ab3c14c1f423eb13b485c947c5e5551b300e449217301214d46af37fba6643cca855f033e7c3b90e39d7aee7b32c8acadf0ddc71cf94f9438580ebb98e4441d43b3b4fbf93603b38cda1c5b1bc1f169431a9e94562b74c999a20e4b639295d7dbbfde30d1076175de5ad1b1b066522dc4bb67d614f7eeae933c956d24675c29d2c8e8df94883ddca17c9a702fc0bdaf421baef827495e19bd8d8eeedfd28d96848b38e"}]}, 0x209) syz_80211_inject_frame(&(0x7f00000023c0), &(0x7f0000002400)=@mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_b, @random="9618d2b3407f", {0x3, 0x7}}, 0x15, @void}, 0x1a) 16:40:53 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITHAW(r0, 0xc0045878) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x0, 0x0, 0x4) socketpair(0xa, 0x1, 0x8000, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) poll(&(0x7f00000000c0)=[{r2, 0x1000}, {r3, 0x400}, {r4, 0x40}], 0x3, 0x6) 16:40:53 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() pidfd_open(r0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) write(r1, &(0x7f00000002c0)="55bedf082a6d31760cda53ab7b205040acbdfcee13e4caee337dd8eea8038968f17902cdae324dbb53fd3adbd2f5a3024409ae7e6f5719f1daf5a8a2db70c59fe8b3e2a0392cc8b6f302280a5acd24e76a73d16fd1272629323b631659eb02ca182f8943d6f0101321ee5abc7b02a6e76da3fd0aa60a55184adc3494499833e81742143916767d1851e52a82d286493d2b192e699141c061d1df8a62d6332440f069e30c8e66505fb905e6182828aae87e22cbbbc7873e9b1f52d803aea6232324fb54b39636b775f0a0c42fe67c9b33b29b95f8b3689eb05a397e07d94f8df679e1384d289caa9077", 0xe9) pselect6(0x40, &(0x7f0000000200)={0x8}, 0x0, &(0x7f0000000280)={0xff}, 0x0, 0x0) 16:40:53 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000d3f4655fd3f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000004000008000000d2c20100120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32373131373433303500"/192, 0xc0, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040000c00000000000000d3f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000004400000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000010500)="ff000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d3f4655fd3f4655fd3f4655f00"/4128, 0x1020, 0x1000}, {&(0x7f0000011600)="ed41000000080000d3f4655fd3f4655fd3f4655f00000000000004004000000000000800050000000af301000400000000000000000000000100000020000000", 0x40, 0x2400}, {&(0x7f0000011700)="200000004c7ddc8f4c7ddc8f00000000d3f4655f00"/32, 0x20, 0x2480}, {&(0x7f0000011800)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000040000000", 0x40, 0x2800}, {&(0x7f0000011900)="20000000000000000000000000000000d3f4655f00"/32, 0x20, 0x2880}, {&(0x7f0000011a00)="8081000000180000d3f4655fd3f4655fd3f4655f00000000000001004000000010000800000000000af301000400000000000000000000000300000050000000", 0x40, 0x2c00}, {&(0x7f0000011b00)="20000000000000000000000000000000d3f4655f00"/32, 0x20, 0x2c80}, {&(0x7f0000011c00)="c041000000380000d3f4655fd3f4655fd3f4655f00000000000002004000000000000800000000000af301000400000000000000000000000700000030000000", 0x40, 0x4800}, {&(0x7f0000011d00)="20000000000000000000000000000000d3f4655f000000000000000000000000000002ea00"/64, 0x40, 0x4880}, {&(0x7f0000011e00)="ed4100003c000000d3f4655fd3f4655fd3f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000b65c7bf3000000000000000000000000000000000000000000000000200000004c7ddc8f4c7ddc8f4c7ddc8fd3f4655f4c7ddc8f0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x4c00}, {&(0x7f0000011f00)="ed8100001a040000d3f4655fd3f4655fd3f4655f00000000000001004000000000000800010000000af3010004000000000000000000000001000000600000000000000000000000000000000000000000000000000000000000000000000000000000005a0e0125000000000000000000000000000000000000000000000000200000004c7ddc8f4c7ddc8f4c7ddc8fd3f4655f4c7ddc8f0000000000000000", 0xa0, 0x5000}, {&(0x7f0000012000)="ffa1000026000000d3f4655fd3f4655fd3f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3237313137343330352f66696c65302f66696c653000000000000000000000000000000000000000000000b8e8b49f000000000000000000000000000000000000000000000000200000004c7ddc8f4c7ddc8f4c7ddc8fd3f4655f4c7ddc8f0000000000000000", 0xa0, 0x5400}, {&(0x7f0000012100)="ed8100000a000000d3f4655fd3f4655fd3f4655f000000000000010000000000000000100100000073797a6b616c6c65727300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008b63b3ec000000000000000000000000000000000000000000000000200000004c7ddc8f4c7ddc8f4c7ddc8fd3f4655f4c7ddc8f0000000000000000000002ea040700000000000000000000000000006461746106015403000000000600000000000000786174747231000006014c0300000000060000000000000078617474723200"/256, 0x100, 0x5800}, {&(0x7f0000012200)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d3f4655fd3f4655fd3f4655f00000000000002004000000000000800010000000af30100040000000000000000000000050000007000000000000000000000000000000000000000000000000000000000000000000000000000000044cd9848000000000000000000000000000000000000000000000000200000004c7ddc8f4c7ddc8f4c7ddc8fd3f4655f4c7ddc8f0000000000000000", 0xc0, 0x5be0}, {&(0x7f0000012300)="ed81000064000000d3f4655fd3f4655fd3f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c4794644c000000000000000000000000000000000000000000000000200000004c7ddc8f4c7ddc8f4c7ddc8fd3f4655f4c7ddc8f0000000000000000000002ea04073403000000002800000000000000646174610000000000000000", 0xc0, 0x6000}, {&(0x7f0000012400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x63c0}, {&(0x7f0000012500)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000012600)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8070000", 0x20, 0x18000}, {&(0x7f0000012700)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x18800}, {&(0x7f0000012800)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x19000}, {&(0x7f0000012900)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x19800}, {&(0x7f0000012a00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1a000}, {&(0x7f0000012b00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1a800}, {&(0x7f0000012c00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x1b000}, {&(0x7f0000012d00)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x20000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x20400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x20800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x20c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x21000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000200"/96, 0x60, 0x21400}, {&(0x7f0000013300)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x28000}, {&(0x7f0000013400)="0200"/32, 0x20, 0x28400}, {&(0x7f0000013500)="0300"/32, 0x20, 0x28800}, {&(0x7f0000013600)="0400"/32, 0x20, 0x28c00}, {&(0x7f0000013700)="0500"/32, 0x20, 0x29000}, {&(0x7f0000013800)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000200"/96, 0x60, 0x29400}, {&(0x7f0000013900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x30000}], 0x0, &(0x7f0000013e00)) getdents(r0, &(0x7f0000000600)=""/246, 0xf6) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)='\\\x00', &(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='ext4\x00'], &(0x7f0000000780)=[&(0x7f0000000700)='ext4\x00', &(0x7f0000000740)='ext4\x00']) [ 205.449992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.470122] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.493557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.504044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:40:53 executing program 6: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @broadcast, @from_mac=@broadcast, {0x1, 0x5}}, @ver_80211n={0x0, 0x6722, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x16, 0x0, {0x0, 0x13, @random="d480d52ccdb0910352e35c292400773d5bf8c4"}, @val, @val={0x2d, 0x1a, {0x422, 0x0, 0x0, 0x0, {0xc3, 0x73, 0x0, 0x176, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x800, 0x1, 0x5}}, [{0xdd, 0xb9, "c57875a7acbe4e59ce70986fae067deaa53b996cb69e1daafc53e7f4ca5667daa40b1b5a8eb92dea9ed87c10b6a9de7327f6068c48a6f68e6d465b136ee8c8e59607a924b612a3b3b02b5110803135353d9482df34828467aaca553bac4f32f1987c2afb271918acaf53e687b8025837bc89e320a6cf0fc99170f2e846848d30e2d8dbe7767804a98ebe774d7b2dcc3747801d477f84a04fdc18de41014ddef5265f481af6d7290dfe833e32a9c78a1168a64e8dab04b97f05"}, {0xdd, 0x10, "3c03e43a47c0eb067d472cc1b4f550a2"}, {0xdd, 0xe7, "08db6770327432589f730c3b467daf70ef618756ee5db42b8ac806b031670cd05726825fffcafdecbc2d9d6f965e3eba4bd0f363120f6a629bc61f6ec96906b8cb43a790ab3c14c1f423eb13b485c947c5e5551b300e449217301214d46af37fba6643cca855f033e7c3b90e39d7aee7b32c8acadf0ddc71cf94f9438580ebb98e4441d43b3b4fbf93603b38cda1c5b1bc1f169431a9e94562b74c999a20e4b639295d7dbbfde30d1076175de5ad1b1b066522dc4bb67d614f7eeae933c956d24675c29d2c8e8df94883ddca17c9a702fc0bdaf421baef827495e19bd8d8eeedfd28d96848b38e"}]}, 0x209) syz_80211_inject_frame(&(0x7f00000023c0), &(0x7f0000002400)=@mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_b, @random="9618d2b3407f", {0x3, 0x7}}, 0x15, @void}, 0x1a) [ 205.568259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:40:53 executing program 1: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITHAW(r0, 0xc0045878) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x0, 0x0, 0x4) socketpair(0xa, 0x1, 0x8000, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) poll(&(0x7f00000000c0)=[{r2, 0x1000}, {r3, 0x400}, {r4, 0x40}], 0x3, 0x6) [ 205.630181] loop4: detected capacity change from 0 to 2048 [ 205.679040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.698753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.718088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.721504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.752994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.831794] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. 16:41:03 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @broadcast, @from_mac=@broadcast, {0x1, 0x5}}, @ver_80211n={0x0, 0x6722, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x16, 0x0, {0x0, 0x13, @random="d480d52ccdb0910352e35c292400773d5bf8c4"}, @val, @val={0x2d, 0x1a, {0x422, 0x0, 0x0, 0x0, {0xc3, 0x73, 0x0, 0x176, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x800, 0x1, 0x5}}, [{0xdd, 0xb9, "c57875a7acbe4e59ce70986fae067deaa53b996cb69e1daafc53e7f4ca5667daa40b1b5a8eb92dea9ed87c10b6a9de7327f6068c48a6f68e6d465b136ee8c8e59607a924b612a3b3b02b5110803135353d9482df34828467aaca553bac4f32f1987c2afb271918acaf53e687b8025837bc89e320a6cf0fc99170f2e846848d30e2d8dbe7767804a98ebe774d7b2dcc3747801d477f84a04fdc18de41014ddef5265f481af6d7290dfe833e32a9c78a1168a64e8dab04b97f05"}, {0xdd, 0x10, "3c03e43a47c0eb067d472cc1b4f550a2"}, {0xdd, 0xe7, "08db6770327432589f730c3b467daf70ef618756ee5db42b8ac806b031670cd05726825fffcafdecbc2d9d6f965e3eba4bd0f363120f6a629bc61f6ec96906b8cb43a790ab3c14c1f423eb13b485c947c5e5551b300e449217301214d46af37fba6643cca855f033e7c3b90e39d7aee7b32c8acadf0ddc71cf94f9438580ebb98e4441d43b3b4fbf93603b38cda1c5b1bc1f169431a9e94562b74c999a20e4b639295d7dbbfde30d1076175de5ad1b1b066522dc4bb67d614f7eeae933c956d24675c29d2c8e8df94883ddca17c9a702fc0bdaf421baef827495e19bd8d8eeedfd28d96848b38e"}]}, 0x209) syz_80211_inject_frame(&(0x7f00000023c0), &(0x7f0000002400)=@mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_b, @random="9618d2b3407f", {0x3, 0x7}}, 0x15, @void}, 0x1a) 16:41:03 executing program 6: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @broadcast, @from_mac=@broadcast, {0x1, 0x5}}, @ver_80211n={0x0, 0x6722, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x16, 0x0, {0x0, 0x13, @random="d480d52ccdb0910352e35c292400773d5bf8c4"}, @val, @val={0x2d, 0x1a, {0x422, 0x0, 0x0, 0x0, {0xc3, 0x73, 0x0, 0x176, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x800, 0x1, 0x5}}, [{0xdd, 0xb9, "c57875a7acbe4e59ce70986fae067deaa53b996cb69e1daafc53e7f4ca5667daa40b1b5a8eb92dea9ed87c10b6a9de7327f6068c48a6f68e6d465b136ee8c8e59607a924b612a3b3b02b5110803135353d9482df34828467aaca553bac4f32f1987c2afb271918acaf53e687b8025837bc89e320a6cf0fc99170f2e846848d30e2d8dbe7767804a98ebe774d7b2dcc3747801d477f84a04fdc18de41014ddef5265f481af6d7290dfe833e32a9c78a1168a64e8dab04b97f05"}, {0xdd, 0x10, "3c03e43a47c0eb067d472cc1b4f550a2"}, {0xdd, 0xe7, "08db6770327432589f730c3b467daf70ef618756ee5db42b8ac806b031670cd05726825fffcafdecbc2d9d6f965e3eba4bd0f363120f6a629bc61f6ec96906b8cb43a790ab3c14c1f423eb13b485c947c5e5551b300e449217301214d46af37fba6643cca855f033e7c3b90e39d7aee7b32c8acadf0ddc71cf94f9438580ebb98e4441d43b3b4fbf93603b38cda1c5b1bc1f169431a9e94562b74c999a20e4b639295d7dbbfde30d1076175de5ad1b1b066522dc4bb67d614f7eeae933c956d24675c29d2c8e8df94883ddca17c9a702fc0bdaf421baef827495e19bd8d8eeedfd28d96848b38e"}]}, 0x209) syz_80211_inject_frame(&(0x7f00000023c0), &(0x7f0000002400)=@mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_b, @random="9618d2b3407f", {0x3, 0x7}}, 0x15, @void}, 0x1a) 16:41:03 executing program 0: r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x2da, 0x3001) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4c441) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000850) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write(r1, &(0x7f0000000900)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) sendfile(r1, r2, 0x0, 0xfdef) 16:41:03 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) flock(r7, 0x2) clone3(&(0x7f0000005880)={0x14f824100, 0x0, &(0x7f0000000280), 0x0, {0x1f}, 0x0, 0x0, &(0x7f0000000080)=""/1, 0x0}, 0x58) 16:41:03 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x0, 0x0, 0x4) flock(r2, 0x2) sendfile(r0, r1, 0x0, 0x0) 16:41:03 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='timers\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="180100021a000264052d106320629c9c4a4090002dbd70000700000000000000040000000000000059ab907be00000010000000000006e4d000063edbd3e9300004e2300084e2000f202003a0402000000", @ANYRES32=r2, @ANYRES32=0xee00, @ANYBLOB="fe80000000000000000000000000001c000004d66c000000e00000010000000000000000000000000000ffffffffffff5b0000000000000001000000000000000800000000000000010000800000000002000000000000000300000000000000e4ff887e00000000030000000000000000100000000000000100000000000000008000000000000005000000030000000800000025bd7000043500000a000301240000000000000018001a00fc020000000000000000000000000000ffffffff00000000000000000000000002003704"], 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x40) r3 = accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) bind$packet(r3, &(0x7f0000000080)={0x11, 0x1, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14) 16:41:03 executing program 2: fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000100)={0x1, 0x2, 0x2, 0x1f}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000200)={0x28240, 0x0, 0x4}, 0x18) getdents64(r0, &(0x7f0000000240)=""/33, 0x21) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0xb3355000) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 16:41:03 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7d, 0x7}, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) fallocate(0xffffffffffffffff, 0x4, 0x401, 0x3f) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r2 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r2, &(0x7f0000000000)=""/159, 0x9f, 0x200000) bind$unix(r2, &(0x7f0000000440)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r3 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x3, 0x1, &(0x7f0000000340)=[{&(0x7f0000000240)="ca350c152591202c44d1f14342aeb61fed65f2dac1dd007d16ca994b89823c4b4bdf1959f9ba83353095b11901fcb4dfd381a48daae6f7a42638ccbb06e020306fe881ae9c1a849951a575633d23767aa53fa3d605c58b7bd964d5be5a34b142d5abf536c170ab565c9bb88cfe54bed573b29afb3372fffe00dc3c8c526000cbfd8cd2f0f6c4e0acfff24d8314fbcfad4dd4e56c531856bbf4e1", 0x9a, 0x5}], 0x1, &(0x7f0000000380)={[{@dots}, {@nodots}, {@dots}, {@dots}, {@dots}, {@nodots}], [{@smackfstransmute={'smackfstransmute', 0x3d, './cgroup/syz0\x00'}}, {@uid_lt}, {@obj_role={'obj_role', 0x3d, '!'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}]}) move_mount(r0, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000400)='./file0\x00', 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff) sendfile(r0, r1, 0x0, 0xfdef) [ 215.253799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.263350] audit: type=1400 audit(1768322463.178:15): avc: denied { map } for pid=4789 comm="syz-executor.2" path="pipe:[7411]" dev="pipefs" ino=7411 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 215.269358] msdos: Unknown parameter 'smackfstransmute' [ 215.278681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.280618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.295241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.300419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.337315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.347011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:41:03 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x0, 0x0, 0x4) flock(r2, 0x2) sendfile(r0, r1, 0x0, 0x0) 16:41:03 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100080}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="00000800f9617f58c271e93dc7b32a24ed67a3d0523d94b2e808177cbdb5fb8669c3600d9fde3cd7380f68aa35a788b4c4651f15f4b3c592606dfd4bd7406b6a0d0c5cadb6da5ee22e959650c17c", @ANYRES16=r1, @ANYRES32=r1, @ANYRESDEC=r2], 0x28}}, 0x0) 16:41:03 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000002c0), 0xc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4fe, 0x0, 0x3f, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000000)=0xe5, 0x4) bind$inet6(r1, &(0x7f0000000740)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040), 0x0, 0x44894) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) shutdown(0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e25, 0x404, @dev={0xfe, 0x80, '\x00', 0x31}, 0x1b}, 0x1c) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="db4d31d6805ecdac87307b14c169d9d9", 0x10}, {&(0x7f0000000200)="ee91b199cbde153a80cc89fff10933ca330cad7d5e0f004c6e6896c0909b95c3eebca1ddbf38aeb052c2cf7f3c5445bfa4c9cc966edb83bd3436a22c2a8e1cafade0533901774eb216d833be627e96c9a9c78fc0ad06be165d206fdd35dbde963942c7cb29ed300d6551b21ee9c57532", 0x70}], 0x2}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ea", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000480)="69f879c56b8d56ee48c690a3e8097bc136b9a91eb9ce4aed86c622b971ae9c025addcfeccd2e7377c3db003410f693c43d74ef4eaa3703b196032b75a5b0b3e910877e7d538ba7124ce60855014503270e57b509f2b06a30a70c8714064037705df10fbbb412773edbd36e48", 0x6c}], 0x100000000000003c}}], 0x3, 0x4c890) connect$inet6(0xffffffffffffffff, &(0x7f0000000640)={0xa, 0x4e21, 0x8, @remote, 0x9}, 0x1c) shutdown(r1, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.net/syz0\x00', 0x1ff) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x20, @ipv4={'\x00', '\xff\xff', @remote}, 0x15aa}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) 16:41:03 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x0, 0x0, 0x4) flock(r2, 0x2) sendfile(r0, r1, 0x0, 0x0) 16:41:03 executing program 2: fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000100)={0x1, 0x2, 0x2, 0x1f}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000200)={0x28240, 0x0, 0x4}, 0x18) getdents64(r0, &(0x7f0000000240)=""/33, 0x21) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0xb3355000) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 16:41:03 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) write$binfmt_aout(r0, &(0x7f00000000c0)={{0x107, 0x3f, 0x8, 0x128, 0x1a4, 0xfff, 0x1d7, 0x10001}, "b1af8def167e85b21a317996f4b8a6c73279276d1e2d99e7a45c8a8f185b39ac6a6665977c961d0fb25f48f3a633f9f4256930b579a85e947c97c3b45956e436d2309c5f2387dd9ce64730f3aa22990754354dcd3365f40445d7dee5120359fe9c62bb3b4608582350c9609a42d284a3e3592bd3d2b66ebd90a7"}, 0x9a) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x4010, r1, 0xa8a38000) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000003c0)={{r1}, "6c4523c12b31273d886bb4d68530313c8d1ec942410f93f9d41ba1962a82784aac822797dbd82809997bd89d7f355b7c677d1e12d498f5fcc87f8ff057159a9a1a57f13b3c4f5ffe6b92b720d6b9cd9b5438d91955343462891305d75600c2d4d10ca3fa2e3657515b79cd32689371fc8fc74526f881cbf3fad806f2efeec39970f25354e3f6db20da48039db0d1107dae2b77cfedae7f273b6741fd43d09fe9496fd0ad39a83636d1c5e19d567b092543e2e5f65e5bbca0181bf83c621a8e65484fd40a860f996f27fbed8c3aa03fefbbaa62a773e8c013c10c0ed53de82bbb85e4842a5eb623f8fd47d3d0b1b9b86ae2a665f23ea7a7cabd0155f81b09a2a6554ac631e7f963f82817e8a93a66eb945eb620d0e53c596d577a77b28078bc9df77f35f269e639afa591f0cfcc4ebe956734df7c651c7261225ec3203b5d7c151225348a28cc91b0fbb73aa2fbfbf1f2592c84b635fe6987694154926f2cf27e1a443c36d5b1c1b223ce40a28398d6bdcac670ef1276ed57b070f1bac0abe0eea55e8864e7b810d248a70280871c180c75ee4aa52355a2b9c5b945fed04b83773433dbf94374e330ed784b70b851691d6b3ba3e6e9049bfa63e7d641b0efe30b3d2748baa3d0efba91f30f4a5bb3fe235d96cd342e56997ce14ee5e8aa0b71bea7ffcf76e14a331d6e2eb8b5058484fabc7cb6ecbe5992f995051370078a0b3df7e74bfabf40b2e0159e22281d07e6cb342372ce5d150a185c70bf3ad497c9f3d7b46189704bfe8b3e0d330d31bc1679918e6bad771d9a9b3c54c8b59d3725e7d60aa2b5763e1e2e3557d9f27d8cba01170258c653ef650c8b6869fd6762265d377ceeb0e75d3bf1f21d17dac2a068809ce4877d4668ab96cec5656a25fce3823ff15e4bc83b7f87d3880e71f01c28486cc4715cfcddb4d852d8985a9521b73263672a86f583530d4b7cda1cb79de7d7af0d4c312d77d66d43f24fa1707b253b290e35d11d4155f674311a3ed421ec72d2824d403c6fc3ea9297e5ff391e4d6f15b0eab12b0a7773c4e5ec95b9bb891fea1ecebc2460716e85af2cfb86a46ecd698c2af094f58f64bf77a269ec11af4e1fddddaa567be1cafb0dda8442ab6c2e1a092ef8def784321349fcf9db1387849d3a5bd572315fc0984ce270f65c779c5e16b9ca649a1698e30f247a6f55a1088e3bfde15d1e09dc2f8b50f4fc1f33104cdd3340bfb6e88e247412a36352f68413584cd3ec41cb936c6acf97537e3e5fffd1d7f06480185028be9431b8e4914ab71e6dc4683a9da2e697a84ace6d313a6ea04e99298e8db08f8c7a93558614105fe81d5f855e0abd4fa00e4948aa1c011ceb4422e2ef2af93b8395d3394639f00299fe48470b98056766ecdbeab51091d15ae735f84c420c9295186d1b522ac25d5f560e06cdc33c2d0ae3bce13d32be53c518113007905ee7d020e44cf0c1d9080c7313f430eff34b95b85359cf1cec766798817a453672be0b58363841cec9c5e83d5c4f78736681f832a7054cd22e836cb03d1fa64ecdee5102e7f57a56341815027724f694ab9df7802b057b9299f0d936bc220ffe1e7a52b36dfbe2eb6734beac9156cace44ffe3afe73b2c45ce3975e1bd1febcd09a0a078005469f8d0ee6b7e4f0dff1b54a4f1743269decb67555ad4e4028669d3fac08926d6896e483dc767a1898f9a1919f88ae1f67ce44c8c4e9805bcc150fddb667bd1eab02ab8e6a3698a8b8d85f9bfa0eebacf1cc978e160e5c684c7926c8d76d8dcf712fd7c5542b7e413ad2494e42aefad8fd2858e2987e64b9159db0fb808269b5ac815e2cb9ff645890774d35136719060722bebe83ede90554926642566d48c744642ef6fc4a8d4f03d2fc80aa40a915485b1e47ab0996966c6ec384b6d8eeb628f6cbc4d5229d49d9115d37d1a4c888c6447c0c04206976db35a532340606c3cb4c9b277cd848c3703daf92c55d7f6196811067162b78a88dafde28efbdd8afac2b1e208954a54ee7eab665583106e5dcc0556e6a736e3ea2397ff64c96ce4880be75aa3523c31020b62985e4ab486450999bb2670082758711dbf8d2c9cee34ec00f7a5d82185468854bc68aafece4f290f2a8abe93cd0ba3deaeb753d2a79e616681974f244d01216a790336c0a649284d6c1da4dce172a05eb4215fbe4534a3e2e47647e76ba99c162ab0c7526e4576ca31cd0fc2d934b401b057e60aabd79a622d85e687269bee4f8eca1141be4185d8134956faa021324ac15e221126e37f480e44d0bf9f362a0319422f2a7028954dbf8265645adc2ef0fca49dff99784e3d4fcd3356fac75da7a6e9db93ba3c59a1401a0f4ffed26d759804858b0f38e831d7efaebf0602fc407edbc1a2e2d7cdf0354fb9d269fa3c4c9ab7576b06e9b3001e6ce91f5ad97ecf34f6e4f4715f1ba5d734da0e5e41012addeb12b8b0693071ce79d2025ef226b61ca23c13d71b79ba3a6c869540701491f45de0ab523748fafd95090da1cc26f783a02c863c866ac9bbdc6b3427d46af464398d5c9630b8718a33844565700dba77adab40b4c118f06f320e4ca42cf99af1902b983c1f702fb0d4369a4d67baadc05146a0dac7a012448e6aac0bee2e5add04a2ee39d13f012d55013a0d4d45c72eec4dcfa1f8690d72962a1b51f9113abc2168ca85383d77185f79aaee6150014132152d600ca439258eabc4ac44eec1cc0dbd6707017e481104c2e43f3c01367f3c0f17e095e9ccab88881726cdee348ceb69ac057143893e87798d6ffa0f10c9b504e0f76a3074c16172808c0e34d2f3755751312629cd1ca5b86646611bfa5733c208d2187a37e230305d8b39ef0945187fc70e99cc5cc3cfb7db84bf1c7ae7776d4f081e3d9fe0a5ccecf7c563255b4c0c100e486dc46c0e189d3733370353afee13a2a0ca7398fb3bab9ed78ecc47a4499974a1c21095475493932c81b6039c8ef9e8662f9bb96e6803a5f04669651423ed3f3b2e22a993b3b8ae2d58a75d13c54938621fab1fd232e2adaeabfae88eaa930344db4d83b97d96c5ed103cea8373d710fc036f45282153dfa2620059273dc005fa6fd1be0b15d25f9a947d8cdd4f7ca98cd9919267fe63057286c394a14e35fb60def7107c47284e50d00877bb16dad59bbf030ca3ecd3699deb0bb467b59d5845a78041f4b86d48e9b5dbbbce08118e8ac869e82cf4b638b4d7b4ffdcbfd240ba4a522691f0376087796de406ba619edb8a01ac7ca120d5c00bb6313ee37438bc1f5c0bcac526c67695981c40417d7029ed45f9461c77de385e14ee65689e7cd31198ed6afe9a9dc58eab6f84b721b4ee5cfc7d1cdd9504a7be7514e448e13130602d30c37c09d0cce8c909919a6074a904eafe15c8da8c1821bce1eb705b7af1d4aadfa3189752bb6823a794cf5f541c354a80920522c3bf8802cc151bb0f7812bb3437cc36fba9a4f23519fc81788a60db36029b820c08ef571822ecc884ee98e07e793a20cb14b3ab5b0e271ef2e646d518e3b979922608a8c2adf859b121313d863854eda35ba9f2c3eca9515aafd7fcd0eedb964b137ab81e8793610130cd3d96eab1134f33aeb56f00ef49f682987f6dbafa916044fbc05594eb3c0d3e265c889250a111be4d1d56c361edade6931e0bd7e4b5134fa49880d739273a499f70aeab1ad63d9f932b548b16d3ab7f70af4c91ec789d38dced4c3ee4cc5bb814b1fcc34f761542022a5ed813351006fcf41d3fdaf74ce33f2441615a2a9a9e16e71f816b2ff0ec31b756ccffe12fc44646ca51b4fb66ee087b0c7f12d4300172ccb92d525994e44768b9f5b0f0317261ce522ab8069600003b537758d0752b6c8b74713e1664d18365384477804eb6d94aed919764fbb5c4622435b76753409b2f10a0cd15d87329c75109eb796971682580085d92d7c97bbf9547b8b9a1019cf3ed923c019fe46b4375f37f5df9dec9e65416d0e17a67afe7ff83f44ef004721987223d8f867d55733c16f28885b92e6716c75f873af06ef863c21d3772086e972d576eb933bead60556158520fe6c02e037df68e617b0ad32920784adf5014a3085b95628114dfab2da7e50eba14583f79b6d55cc2260d754e4d0f66c0e1fcbdb0c982375ea63cb0e84589313d2962768b8158e90376cd80adad46e7be60ddd52d6a4b5ed7bfd8bf6357f13e2325c14a9e7706a29400dba8a6fe73d413378544da89fb5503648ca0d47d1d601b157a0c6cc0fee6e7f6fd5173ef5a3f2f5bf177351f1b1c90a2480eeb612bacb9169543283102e941c0f35698b2b4faf17c2cac5d5c4f493c8ccba0d991c9313401ecc2f67924480a7f3b736662bc044c92bf386f9e479bf62e02fae626a2e72536d98b0d30abcfa58f2628213460a3b9c6f6a49f7ba502d2e4e332e50d2377d759f54f8608eda9dcbe76bbe7e8d25982dd146708b48135b2102079e4186a7ecd77df725e02fcf5b77cd5253018e3e23ce070e0c1ca57f70b1f435438a03abd4d53fff895957ea587033ecd98217cb37accaa112196578678a6a2121bc470f2572f002a6709e2d887a4ad14fe58245ce637d7ce0dddfd1bf4963b2a70ca3393db003ba274a58138383288ce122e97b7fe320c899dd7f0ffc329be441e73c079f375a2bbd8ea1a820a992d548dfe456bbe2bd34e707a9a97dd9929bd4c59a2f66d533a8ec71552e5494cc81f2822623e5c909d5144249f89199dd473b7ddf30abb15dd9cda06f33341ca9037309d8df627c055fa3bca567432df4677220cbdca1511ec76bced1e8ccc5e94887a9db6c489744de2d1b20a7d9e37f1ecbf6746dc284cc3687dd995fbad51f8200dd8575a733f9156a48b8273730cf0013c229179ab6b4797a8214192e77a17a72655e7acb5bbfb2d4ff44eb2543463943ef0738c9a3afaad9f1814b9018389cb42840f50427bc218860c6c73ed574fdaccd356de614e674184e32acf41f21b79678020f485c7cdec6bf6ecdfde74f371139b5fd4d160a8880ae6c0f46680aa5bf1655b7eead15ac0261448f231d35890ac7f3c78917f6671c5772d2ea8a931c0abc02db63df2980518c26a5649c5fd9c8c45928d53d6ad0a22430b777016ff5853120d1266ac9d12bbe51383e599c97ba86c4a371ccd138e3b3eb3a8452625ef29e707af4641be49d30c364b09980f6e1a33ceead66647346bf60a14fcd9ab684f6b6b836ee78532f6c5759c29b05cee56a0cf8c915cca9e97404b280299352145acd65b30921fe7034d242477daacfca449cdbf06bafb71263dae1b60daf05b7d014a0669ae920352205dd6d931fd7de3acf2dcd811ee201b730213e0c28c8fe3a0c583bed22f390becda35de85564419924d6e5875c06371da9c73e31d429b92905eca918b81ca1e527d39ab08a2c6207257b2adfafbc1da18ecd096eef856f8d0dc12b0694d644fb28311c4d3d3a28aef6408c669951cba99faa298d2940fcb23fd80cf50503ae21332de913e6b1dcc139c00980968660cd6672e2d12ee5779fdc7f862f01b8408c5d681316ee37238dcdd64f270c0855f25e17f97c1b727908c722b8b63b78b68fb8f13a2c14d6336327626a94c845f39fa08c756b9f78d8be496f75cf746f658edc47e074910572df376eb6d2d18dcd421c9f0731c53178a6b1e473344adcd3320bb3c5362b7afb2c3dd72533d171fecf81c0b38d161fb563b07661c697892abadf67520e0c3c8b2852a70ff0669d76a5d7fc1afe62c7c99f14f032a43931057c09cf0a846b1718c1"}) io_setup(0x200, &(0x7f00000002c0)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r3, &(0x7f0000000000)=""/159, 0x9f, 0x200000) io_submit(r2, 0x1, &(0x7f0000002ac0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x4400, r0, 0x0, 0x0, 0x2, 0x0, 0x3, r3}]) 16:41:03 executing program 2: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() prlimit64(r0, 0x7, &(0x7f0000000000)={0x2249a93f, 0x8}, &(0x7f0000000040)) capget(&(0x7f00000001c0)={0x20071026, r0}, &(0x7f0000000200)) 16:41:03 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x0, 0x0, 0x4) flock(r2, 0x2) sendfile(r0, r1, 0x0, 0x0) [ 215.822064] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 218.318512] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.321261] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.324522] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.329489] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.335174] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.358913] Bluetooth: hci1: command tx timeout [ 222.405983] Bluetooth: hci1: command tx timeout [ 224.453891] Bluetooth: hci1: command tx timeout [ 224.710948] Bluetooth: hci7: command 0x0406 tx timeout [ 224.712354] Bluetooth: hci5: command 0x0406 tx timeout [ 224.713201] Bluetooth: hci3: command 0x0406 tx timeout [ 224.715158] Bluetooth: hci6: command 0x0406 tx timeout [ 224.716167] Bluetooth: hci0: command 0x0406 tx timeout [ 224.717006] Bluetooth: hci2: command 0x0406 tx timeout [ 224.717864] Bluetooth: hci4: command 0x0406 tx timeout [ 226.502907] Bluetooth: hci1: command tx timeout [ 235.855065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.856193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.952624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.954753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.131384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.145425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.150519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.166764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:41:34 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@assoc_req={@with_ht={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @broadcast, @from_mac=@broadcast, {0x1, 0x5}}, @ver_80211n={0x0, 0x6722, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x16, 0x0, {0x0, 0x13, @random="d480d52ccdb0910352e35c292400773d5bf8c4"}, @val, @val={0x2d, 0x1a, {0x422, 0x0, 0x0, 0x0, {0xc3, 0x73, 0x0, 0x176, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x800, 0x1, 0x5}}, [{0xdd, 0xb9, "c57875a7acbe4e59ce70986fae067deaa53b996cb69e1daafc53e7f4ca5667daa40b1b5a8eb92dea9ed87c10b6a9de7327f6068c48a6f68e6d465b136ee8c8e59607a924b612a3b3b02b5110803135353d9482df34828467aaca553bac4f32f1987c2afb271918acaf53e687b8025837bc89e320a6cf0fc99170f2e846848d30e2d8dbe7767804a98ebe774d7b2dcc3747801d477f84a04fdc18de41014ddef5265f481af6d7290dfe833e32a9c78a1168a64e8dab04b97f05"}, {0xdd, 0x10, "3c03e43a47c0eb067d472cc1b4f550a2"}, {0xdd, 0xe7, "08db6770327432589f730c3b467daf70ef618756ee5db42b8ac806b031670cd05726825fffcafdecbc2d9d6f965e3eba4bd0f363120f6a629bc61f6ec96906b8cb43a790ab3c14c1f423eb13b485c947c5e5551b300e449217301214d46af37fba6643cca855f033e7c3b90e39d7aee7b32c8acadf0ddc71cf94f9438580ebb98e4441d43b3b4fbf93603b38cda1c5b1bc1f169431a9e94562b74c999a20e4b639295d7dbbfde30d1076175de5ad1b1b066522dc4bb67d614f7eeae933c956d24675c29d2c8e8df94883ddca17c9a702fc0bdaf421baef827495e19bd8d8eeedfd28d96848b38e"}]}, 0x209) 16:41:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000880)={0x0, 0x9fa5, &(0x7f00000002c0)={&(0x7f0000000800)={0x34, r2, 0x5, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x1c}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x120, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x120}, 0x1, 0x0, 0x0, 0x48004}, 0x4840) 16:41:34 executing program 2: unshare(0x8000000) semget$private(0x0, 0x0, 0x62b) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000140)=""/251) 16:41:34 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x0, 0x0, 0x4) flock(r0, 0x2) 16:41:34 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) flock(r7, 0x2) clone3(&(0x7f0000005880)={0x14f824100, 0x0, &(0x7f0000000280), 0x0, {0x1f}, 0x0, 0x0, &(0x7f0000000080)=""/1, 0x0}, 0x58) 16:41:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6) r1 = dup2(r0, r0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x1, 0x4}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) 16:41:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400028001000240001000f801", 0x17}, {0x0, 0x0, 0x7ffffffffff}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]) 16:41:34 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) write$binfmt_aout(r0, &(0x7f00000000c0)={{0x107, 0x3f, 0x8, 0x128, 0x1a4, 0xfff, 0x1d7, 0x10001}, "b1af8def167e85b21a317996f4b8a6c73279276d1e2d99e7a45c8a8f185b39ac6a6665977c961d0fb25f48f3a633f9f4256930b579a85e947c97c3b45956e436d2309c5f2387dd9ce64730f3aa22990754354dcd3365f40445d7dee5120359fe9c62bb3b4608582350c9609a42d284a3e3592bd3d2b66ebd90a7"}, 0x9a) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x4010, r1, 0xa8a38000) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000003c0)={{r1}, "6c4523c12b31273d886bb4d68530313c8d1ec942410f93f9d41ba1962a82784aac822797dbd82809997bd89d7f355b7c677d1e12d498f5fcc87f8ff057159a9a1a57f13b3c4f5ffe6b92b720d6b9cd9b5438d91955343462891305d75600c2d4d10ca3fa2e3657515b79cd32689371fc8fc74526f881cbf3fad806f2efeec39970f25354e3f6db20da48039db0d1107dae2b77cfedae7f273b6741fd43d09fe9496fd0ad39a83636d1c5e19d567b092543e2e5f65e5bbca0181bf83c621a8e65484fd40a860f996f27fbed8c3aa03fefbbaa62a773e8c013c10c0ed53de82bbb85e4842a5eb623f8fd47d3d0b1b9b86ae2a665f23ea7a7cabd0155f81b09a2a6554ac631e7f963f82817e8a93a66eb945eb620d0e53c596d577a77b28078bc9df77f35f269e639afa591f0cfcc4ebe956734df7c651c7261225ec3203b5d7c151225348a28cc91b0fbb73aa2fbfbf1f2592c84b635fe6987694154926f2cf27e1a443c36d5b1c1b223ce40a28398d6bdcac670ef1276ed57b070f1bac0abe0eea55e8864e7b810d248a70280871c180c75ee4aa52355a2b9c5b945fed04b83773433dbf94374e330ed784b70b851691d6b3ba3e6e9049bfa63e7d641b0efe30b3d2748baa3d0efba91f30f4a5bb3fe235d96cd342e56997ce14ee5e8aa0b71bea7ffcf76e14a331d6e2eb8b5058484fabc7cb6ecbe5992f995051370078a0b3df7e74bfabf40b2e0159e22281d07e6cb342372ce5d150a185c70bf3ad497c9f3d7b46189704bfe8b3e0d330d31bc1679918e6bad771d9a9b3c54c8b59d3725e7d60aa2b5763e1e2e3557d9f27d8cba01170258c653ef650c8b6869fd6762265d377ceeb0e75d3bf1f21d17dac2a068809ce4877d4668ab96cec5656a25fce3823ff15e4bc83b7f87d3880e71f01c28486cc4715cfcddb4d852d8985a9521b73263672a86f583530d4b7cda1cb79de7d7af0d4c312d77d66d43f24fa1707b253b290e35d11d4155f674311a3ed421ec72d2824d403c6fc3ea9297e5ff391e4d6f15b0eab12b0a7773c4e5ec95b9bb891fea1ecebc2460716e85af2cfb86a46ecd698c2af094f58f64bf77a269ec11af4e1fddddaa567be1cafb0dda8442ab6c2e1a092ef8def784321349fcf9db1387849d3a5bd572315fc0984ce270f65c779c5e16b9ca649a1698e30f247a6f55a1088e3bfde15d1e09dc2f8b50f4fc1f33104cdd3340bfb6e88e247412a36352f68413584cd3ec41cb936c6acf97537e3e5fffd1d7f06480185028be9431b8e4914ab71e6dc4683a9da2e697a84ace6d313a6ea04e99298e8db08f8c7a93558614105fe81d5f855e0abd4fa00e4948aa1c011ceb4422e2ef2af93b8395d3394639f00299fe48470b98056766ecdbeab51091d15ae735f84c420c9295186d1b522ac25d5f560e06cdc33c2d0ae3bce13d32be53c518113007905ee7d020e44cf0c1d9080c7313f430eff34b95b85359cf1cec766798817a453672be0b58363841cec9c5e83d5c4f78736681f832a7054cd22e836cb03d1fa64ecdee5102e7f57a56341815027724f694ab9df7802b057b9299f0d936bc220ffe1e7a52b36dfbe2eb6734beac9156cace44ffe3afe73b2c45ce3975e1bd1febcd09a0a078005469f8d0ee6b7e4f0dff1b54a4f1743269decb67555ad4e4028669d3fac08926d6896e483dc767a1898f9a1919f88ae1f67ce44c8c4e9805bcc150fddb667bd1eab02ab8e6a3698a8b8d85f9bfa0eebacf1cc978e160e5c684c7926c8d76d8dcf712fd7c5542b7e413ad2494e42aefad8fd2858e2987e64b9159db0fb808269b5ac815e2cb9ff645890774d35136719060722bebe83ede90554926642566d48c744642ef6fc4a8d4f03d2fc80aa40a915485b1e47ab0996966c6ec384b6d8eeb628f6cbc4d5229d49d9115d37d1a4c888c6447c0c04206976db35a532340606c3cb4c9b277cd848c3703daf92c55d7f6196811067162b78a88dafde28efbdd8afac2b1e208954a54ee7eab665583106e5dcc0556e6a736e3ea2397ff64c96ce4880be75aa3523c31020b62985e4ab486450999bb2670082758711dbf8d2c9cee34ec00f7a5d82185468854bc68aafece4f290f2a8abe93cd0ba3deaeb753d2a79e616681974f244d01216a790336c0a649284d6c1da4dce172a05eb4215fbe4534a3e2e47647e76ba99c162ab0c7526e4576ca31cd0fc2d934b401b057e60aabd79a622d85e687269bee4f8eca1141be4185d8134956faa021324ac15e221126e37f480e44d0bf9f362a0319422f2a7028954dbf8265645adc2ef0fca49dff99784e3d4fcd3356fac75da7a6e9db93ba3c59a1401a0f4ffed26d759804858b0f38e831d7efaebf0602fc407edbc1a2e2d7cdf0354fb9d269fa3c4c9ab7576b06e9b3001e6ce91f5ad97ecf34f6e4f4715f1ba5d734da0e5e41012addeb12b8b0693071ce79d2025ef226b61ca23c13d71b79ba3a6c869540701491f45de0ab523748fafd95090da1cc26f783a02c863c866ac9bbdc6b3427d46af464398d5c9630b8718a33844565700dba77adab40b4c118f06f320e4ca42cf99af1902b983c1f702fb0d4369a4d67baadc05146a0dac7a012448e6aac0bee2e5add04a2ee39d13f012d55013a0d4d45c72eec4dcfa1f8690d72962a1b51f9113abc2168ca85383d77185f79aaee6150014132152d600ca439258eabc4ac44eec1cc0dbd6707017e481104c2e43f3c01367f3c0f17e095e9ccab88881726cdee348ceb69ac057143893e87798d6ffa0f10c9b504e0f76a3074c16172808c0e34d2f3755751312629cd1ca5b86646611bfa5733c208d2187a37e230305d8b39ef0945187fc70e99cc5cc3cfb7db84bf1c7ae7776d4f081e3d9fe0a5ccecf7c563255b4c0c100e486dc46c0e189d3733370353afee13a2a0ca7398fb3bab9ed78ecc47a4499974a1c21095475493932c81b6039c8ef9e8662f9bb96e6803a5f04669651423ed3f3b2e22a993b3b8ae2d58a75d13c54938621fab1fd232e2adaeabfae88eaa930344db4d83b97d96c5ed103cea8373d710fc036f45282153dfa2620059273dc005fa6fd1be0b15d25f9a947d8cdd4f7ca98cd9919267fe63057286c394a14e35fb60def7107c47284e50d00877bb16dad59bbf030ca3ecd3699deb0bb467b59d5845a78041f4b86d48e9b5dbbbce08118e8ac869e82cf4b638b4d7b4ffdcbfd240ba4a522691f0376087796de406ba619edb8a01ac7ca120d5c00bb6313ee37438bc1f5c0bcac526c67695981c40417d7029ed45f9461c77de385e14ee65689e7cd31198ed6afe9a9dc58eab6f84b721b4ee5cfc7d1cdd9504a7be7514e448e13130602d30c37c09d0cce8c909919a6074a904eafe15c8da8c1821bce1eb705b7af1d4aadfa3189752bb6823a794cf5f541c354a80920522c3bf8802cc151bb0f7812bb3437cc36fba9a4f23519fc81788a60db36029b820c08ef571822ecc884ee98e07e793a20cb14b3ab5b0e271ef2e646d518e3b979922608a8c2adf859b121313d863854eda35ba9f2c3eca9515aafd7fcd0eedb964b137ab81e8793610130cd3d96eab1134f33aeb56f00ef49f682987f6dbafa916044fbc05594eb3c0d3e265c889250a111be4d1d56c361edade6931e0bd7e4b5134fa49880d739273a499f70aeab1ad63d9f932b548b16d3ab7f70af4c91ec789d38dced4c3ee4cc5bb814b1fcc34f761542022a5ed813351006fcf41d3fdaf74ce33f2441615a2a9a9e16e71f816b2ff0ec31b756ccffe12fc44646ca51b4fb66ee087b0c7f12d4300172ccb92d525994e44768b9f5b0f0317261ce522ab8069600003b537758d0752b6c8b74713e1664d18365384477804eb6d94aed919764fbb5c4622435b76753409b2f10a0cd15d87329c75109eb796971682580085d92d7c97bbf9547b8b9a1019cf3ed923c019fe46b4375f37f5df9dec9e65416d0e17a67afe7ff83f44ef004721987223d8f867d55733c16f28885b92e6716c75f873af06ef863c21d3772086e972d576eb933bead60556158520fe6c02e037df68e617b0ad32920784adf5014a3085b95628114dfab2da7e50eba14583f79b6d55cc2260d754e4d0f66c0e1fcbdb0c982375ea63cb0e84589313d2962768b8158e90376cd80adad46e7be60ddd52d6a4b5ed7bfd8bf6357f13e2325c14a9e7706a29400dba8a6fe73d413378544da89fb5503648ca0d47d1d601b157a0c6cc0fee6e7f6fd5173ef5a3f2f5bf177351f1b1c90a2480eeb612bacb9169543283102e941c0f35698b2b4faf17c2cac5d5c4f493c8ccba0d991c9313401ecc2f67924480a7f3b736662bc044c92bf386f9e479bf62e02fae626a2e72536d98b0d30abcfa58f2628213460a3b9c6f6a49f7ba502d2e4e332e50d2377d759f54f8608eda9dcbe76bbe7e8d25982dd146708b48135b2102079e4186a7ecd77df725e02fcf5b77cd5253018e3e23ce070e0c1ca57f70b1f435438a03abd4d53fff895957ea587033ecd98217cb37accaa112196578678a6a2121bc470f2572f002a6709e2d887a4ad14fe58245ce637d7ce0dddfd1bf4963b2a70ca3393db003ba274a58138383288ce122e97b7fe320c899dd7f0ffc329be441e73c079f375a2bbd8ea1a820a992d548dfe456bbe2bd34e707a9a97dd9929bd4c59a2f66d533a8ec71552e5494cc81f2822623e5c909d5144249f89199dd473b7ddf30abb15dd9cda06f33341ca9037309d8df627c055fa3bca567432df4677220cbdca1511ec76bced1e8ccc5e94887a9db6c489744de2d1b20a7d9e37f1ecbf6746dc284cc3687dd995fbad51f8200dd8575a733f9156a48b8273730cf0013c229179ab6b4797a8214192e77a17a72655e7acb5bbfb2d4ff44eb2543463943ef0738c9a3afaad9f1814b9018389cb42840f50427bc218860c6c73ed574fdaccd356de614e674184e32acf41f21b79678020f485c7cdec6bf6ecdfde74f371139b5fd4d160a8880ae6c0f46680aa5bf1655b7eead15ac0261448f231d35890ac7f3c78917f6671c5772d2ea8a931c0abc02db63df2980518c26a5649c5fd9c8c45928d53d6ad0a22430b777016ff5853120d1266ac9d12bbe51383e599c97ba86c4a371ccd138e3b3eb3a8452625ef29e707af4641be49d30c364b09980f6e1a33ceead66647346bf60a14fcd9ab684f6b6b836ee78532f6c5759c29b05cee56a0cf8c915cca9e97404b280299352145acd65b30921fe7034d242477daacfca449cdbf06bafb71263dae1b60daf05b7d014a0669ae920352205dd6d931fd7de3acf2dcd811ee201b730213e0c28c8fe3a0c583bed22f390becda35de85564419924d6e5875c06371da9c73e31d429b92905eca918b81ca1e527d39ab08a2c6207257b2adfafbc1da18ecd096eef856f8d0dc12b0694d644fb28311c4d3d3a28aef6408c669951cba99faa298d2940fcb23fd80cf50503ae21332de913e6b1dcc139c00980968660cd6672e2d12ee5779fdc7f862f01b8408c5d681316ee37238dcdd64f270c0855f25e17f97c1b727908c722b8b63b78b68fb8f13a2c14d6336327626a94c845f39fa08c756b9f78d8be496f75cf746f658edc47e074910572df376eb6d2d18dcd421c9f0731c53178a6b1e473344adcd3320bb3c5362b7afb2c3dd72533d171fecf81c0b38d161fb563b07661c697892abadf67520e0c3c8b2852a70ff0669d76a5d7fc1afe62c7c99f14f032a43931057c09cf0a846b1718c1"}) io_setup(0x200, &(0x7f00000002c0)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r3, &(0x7f0000000000)=""/159, 0x9f, 0x200000) io_submit(r2, 0x1, &(0x7f0000002ac0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x4400, r0, 0x0, 0x0, 0x2, 0x0, 0x3, r3}]) [ 246.509489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.520933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.528925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.533134] loop5: detected capacity change from 0 to 264192 [ 246.539844] vfat: Unknown parameter 'rodirame' [ 246.553386] loop5: detected capacity change from 0 to 264192 [ 246.555868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:41:34 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x0, 0x0, 0x4) [ 246.564070] vfat: Unknown parameter 'rodirame' 16:41:34 executing program 0: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) lseek(r1, 0x2000000, 0x1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1100) setuid(r2) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = geteuid() syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x100000000000, 0x5, &(0x7f0000000200)=[{&(0x7f00000000c0)="cdb11522db2b7341745731e8e2550c28ebffb26244fc0825bd6eefe6", 0x1c, 0x7}, {&(0x7f0000000100)="509a3adcbab8fc0a210e33b42ffd88b2a80f804b6c6e01ce51edf86f62bcf498956cd53afd1ff5e49089b268b6ca5b6141e19641091de4ab96bd46ff2518c7417c24fe43d16a5b85e1d2d177339794200c5ef5b56fc88720cb6fb1a98501adda8f9c14eea98eff35d1bd2f4b5cb464ae2ae003a796b183792fa989e4600a04635807f7a5292429e91c0e0dd6eb17cea281fd178a081d44605097f6", 0x9b}, {&(0x7f0000000400)="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", 0x1000, 0x4}, {&(0x7f0000001400)="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", 0x1000, 0xc5}, {&(0x7f00000001c0)="0a2ed2185a62de6ef21ea099", 0xc}], 0x220c401, &(0x7f0000002440)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39b07aecb10a492f5ded3dce352c736d61636b66736861743d2c7375626a5f7573", @ANYRESDEC=r2, @ANYBLOB=',func=FILE_CHECK,smackfshat=&\'H#\\*,func=BPRM_CHECK,hash,fowner=', @ANYRESDEC=r3, @ANYBLOB=',dont_measure,euid>', @ANYRESDEC=r4, @ANYBLOB=',\x00']) 16:41:34 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x1008, &(0x7f0000000000), 0x0, 0x4) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {{0x6b}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, 0x0, 0x15, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x64}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200001cc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r5, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0) r8 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x14, 0x0, r9) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)="a6a91e0304d51ef8f90974ab5cec43d6bafab0b6f4195a2eeaa2797f110180a1bd1449a34eade39ce3a80ffc67131c181197", 0x32, 0x10000, 0x1}, 0x8) fork() 16:41:34 executing program 5: r0 = syz_io_uring_setup(0x6133, &(0x7f0000003a00)={0x0, 0x0, 0x6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003a80), &(0x7f0000003ac0)) r1 = dup(r0) dup2(r0, r1) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x11, &(0x7f00000001c0)=[{0x0}], 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0xbc, 0x9, 0x6}) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0xd4, 0x40040) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) pidfd_send_signal(r5, 0x0, 0x0, 0x4) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) r7 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r7, &(0x7f0000000000)=""/159, 0x9f, 0x200000) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/96, 0x60}], 0x1) pidfd_send_signal(r6, 0x0, 0x0, 0x4) process_mrelease(r6, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000080)=[r4, r0, r5, 0xffffffffffffffff], 0x4) 16:41:34 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) creat(&(0x7f0000000300)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) 16:41:34 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]}) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 16:41:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000703000018000000", @ANYRES32=r0, @ANYBLOB="4b0e0000040000002e2f66696c653000"]) r3 = socket$packet(0x11, 0x2, 0x300) dup2(r3, r3) r4 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup2(r4, r4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x0) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000180)={@remote, r7}, 0x14) sendfile(r0, r1, 0x0, 0xfdef) 16:41:34 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) [ 246.913945] audit: type=1400 audit(1768322494.829:16): avc: denied { read } for pid=5351 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 16:41:45 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x800000000000007d}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) fallocate(0xffffffffffffffff, 0x4, 0x8, 0x3f) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_io_uring_complete(0x0) write(r0, &(0x7f0000000380)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x7ff) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000240)=0x7f, 0x0, 0x4) r3 = socket$inet(0x2, 0x8000a, 0x4f3) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000001c0)) fcntl$setstatus(r0, 0x4, 0x44000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff) sendfile(r0, r2, 0x0, 0xfdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1814c2, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(r1, 0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000300)={0x0, r5, 0x1, 0x3, 0x0, 0x9}) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) 16:41:45 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) syz_80211_inject_frame(0x0, 0x0, 0x0) 16:41:45 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x4f032, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 16:41:45 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) 16:41:45 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) write$binfmt_aout(r0, &(0x7f00000000c0)={{0x107, 0x3f, 0x8, 0x128, 0x1a4, 0xfff, 0x1d7, 0x10001}, "b1af8def167e85b21a317996f4b8a6c73279276d1e2d99e7a45c8a8f185b39ac6a6665977c961d0fb25f48f3a633f9f4256930b579a85e947c97c3b45956e436d2309c5f2387dd9ce64730f3aa22990754354dcd3365f40445d7dee5120359fe9c62bb3b4608582350c9609a42d284a3e3592bd3d2b66ebd90a7"}, 0x9a) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x4010, r1, 0xa8a38000) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000003c0)={{r1}, "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"}) io_setup(0x200, &(0x7f00000002c0)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r3, &(0x7f0000000000)=""/159, 0x9f, 0x200000) io_submit(r2, 0x1, &(0x7f0000002ac0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x4400, r0, 0x0, 0x0, 0x2, 0x0, 0x3, r3}]) 16:41:45 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) flock(r7, 0x2) 16:41:45 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0) r1 = dup(r0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x1008, &(0x7f0000000000), 0x0, 0x4) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x301, 0x0, 0x0, {{0x6b}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, 0x0, 0x15, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x64}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x200001cc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000280)={0x20, r5, 0x1, 0x0, 0x0, {0x17}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0) r8 = syz_io_uring_setup(0x455, &(0x7f0000003a00), &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0x14, 0x0, r9) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)="a6a91e0304d51ef8f90974ab5cec43d6bafab0b6f4195a2eeaa2797f110180a1bd1449a34eade39ce3a80ffc67131c181197", 0x32, 0x10000, 0x1}, 0x8) fork() 16:41:45 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000703000018000000", @ANYRES32=r0, @ANYBLOB="4b0e0000040000002e2f66696c653000"]) r3 = socket$packet(0x11, 0x2, 0x300) dup2(r3, r3) r4 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup2(r4, r4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x0) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000180)={@remote, r7}, 0x14) sendfile(r0, r1, 0x0, 0xfdef) [ 257.644962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.654753] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) [ 257.656708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.670900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.679266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:41:45 executing program 1: clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) 16:41:45 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) write$binfmt_aout(r0, &(0x7f00000000c0)={{0x107, 0x3f, 0x8, 0x128, 0x1a4, 0xfff, 0x1d7, 0x10001}, "b1af8def167e85b21a317996f4b8a6c73279276d1e2d99e7a45c8a8f185b39ac6a6665977c961d0fb25f48f3a633f9f4256930b579a85e947c97c3b45956e436d2309c5f2387dd9ce64730f3aa22990754354dcd3365f40445d7dee5120359fe9c62bb3b4608582350c9609a42d284a3e3592bd3d2b66ebd90a7"}, 0x9a) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x4010, r1, 0xa8a38000) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000003c0)={{r1}, "6c4523c12b31273d886bb4d68530313c8d1ec942410f93f9d41ba1962a82784aac822797dbd82809997bd89d7f355b7c677d1e12d498f5fcc87f8ff057159a9a1a57f13b3c4f5ffe6b92b720d6b9cd9b5438d91955343462891305d75600c2d4d10ca3fa2e3657515b79cd32689371fc8fc74526f881cbf3fad806f2efeec39970f25354e3f6db20da48039db0d1107dae2b77cfedae7f273b6741fd43d09fe9496fd0ad39a83636d1c5e19d567b092543e2e5f65e5bbca0181bf83c621a8e65484fd40a860f996f27fbed8c3aa03fefbbaa62a773e8c013c10c0ed53de82bbb85e4842a5eb623f8fd47d3d0b1b9b86ae2a665f23ea7a7cabd0155f81b09a2a6554ac631e7f963f82817e8a93a66eb945eb620d0e53c596d577a77b28078bc9df77f35f269e639afa591f0cfcc4ebe956734df7c651c7261225ec3203b5d7c151225348a28cc91b0fbb73aa2fbfbf1f2592c84b635fe6987694154926f2cf27e1a443c36d5b1c1b223ce40a28398d6bdcac670ef1276ed57b070f1bac0abe0eea55e8864e7b810d248a70280871c180c75ee4aa52355a2b9c5b945fed04b83773433dbf94374e330ed784b70b851691d6b3ba3e6e9049bfa63e7d641b0efe30b3d2748baa3d0efba91f30f4a5bb3fe235d96cd342e56997ce14ee5e8aa0b71bea7ffcf76e14a331d6e2eb8b5058484fabc7cb6ecbe5992f995051370078a0b3df7e74bfabf40b2e0159e22281d07e6cb342372ce5d150a185c70bf3ad497c9f3d7b46189704bfe8b3e0d330d31bc1679918e6bad771d9a9b3c54c8b59d3725e7d60aa2b5763e1e2e3557d9f27d8cba01170258c653ef650c8b6869fd6762265d377ceeb0e75d3bf1f21d17dac2a068809ce4877d4668ab96cec5656a25fce3823ff15e4bc83b7f87d3880e71f01c28486cc4715cfcddb4d852d8985a9521b73263672a86f583530d4b7cda1cb79de7d7af0d4c312d77d66d43f24fa1707b253b290e35d11d4155f674311a3ed421ec72d2824d403c6fc3ea9297e5ff391e4d6f15b0eab12b0a7773c4e5ec95b9bb891fea1ecebc2460716e85af2cfb86a46ecd698c2af094f58f64bf77a269ec11af4e1fddddaa567be1cafb0dda8442ab6c2e1a092ef8def784321349fcf9db1387849d3a5bd572315fc0984ce270f65c779c5e16b9ca649a1698e30f247a6f55a1088e3bfde15d1e09dc2f8b50f4fc1f33104cdd3340bfb6e88e247412a36352f68413584cd3ec41cb936c6acf97537e3e5fffd1d7f06480185028be9431b8e4914ab71e6dc4683a9da2e697a84ace6d313a6ea04e99298e8db08f8c7a93558614105fe81d5f855e0abd4fa00e4948aa1c011ceb4422e2ef2af93b8395d3394639f00299fe48470b98056766ecdbeab51091d15ae735f84c420c9295186d1b522ac25d5f560e06cdc33c2d0ae3bce13d32be53c518113007905ee7d020e44cf0c1d9080c7313f430eff34b95b85359cf1cec766798817a453672be0b58363841cec9c5e83d5c4f78736681f832a7054cd22e836cb03d1fa64ecdee5102e7f57a56341815027724f694ab9df7802b057b9299f0d936bc220ffe1e7a52b36dfbe2eb6734beac9156cace44ffe3afe73b2c45ce3975e1bd1febcd09a0a078005469f8d0ee6b7e4f0dff1b54a4f1743269decb67555ad4e4028669d3fac08926d6896e483dc767a1898f9a1919f88ae1f67ce44c8c4e9805bcc150fddb667bd1eab02ab8e6a3698a8b8d85f9bfa0eebacf1cc978e160e5c684c7926c8d76d8dcf712fd7c5542b7e413ad2494e42aefad8fd2858e2987e64b9159db0fb808269b5ac815e2cb9ff645890774d35136719060722bebe83ede90554926642566d48c744642ef6fc4a8d4f03d2fc80aa40a915485b1e47ab0996966c6ec384b6d8eeb628f6cbc4d5229d49d9115d37d1a4c888c6447c0c04206976db35a532340606c3cb4c9b277cd848c3703daf92c55d7f6196811067162b78a88dafde28efbdd8afac2b1e208954a54ee7eab665583106e5dcc0556e6a736e3ea2397ff64c96ce4880be75aa3523c31020b62985e4ab486450999bb2670082758711dbf8d2c9cee34ec00f7a5d82185468854bc68aafece4f290f2a8abe93cd0ba3deaeb753d2a79e616681974f244d01216a790336c0a649284d6c1da4dce172a05eb4215fbe4534a3e2e47647e76ba99c162ab0c7526e4576ca31cd0fc2d934b401b057e60aabd79a622d85e687269bee4f8eca1141be4185d8134956faa021324ac15e221126e37f480e44d0bf9f362a0319422f2a7028954dbf8265645adc2ef0fca49dff99784e3d4fcd3356fac75da7a6e9db93ba3c59a1401a0f4ffed26d759804858b0f38e831d7efaebf0602fc407edbc1a2e2d7cdf0354fb9d269fa3c4c9ab7576b06e9b3001e6ce91f5ad97ecf34f6e4f4715f1ba5d734da0e5e41012addeb12b8b0693071ce79d2025ef226b61ca23c13d71b79ba3a6c869540701491f45de0ab523748fafd95090da1cc26f783a02c863c866ac9bbdc6b3427d46af464398d5c9630b8718a33844565700dba77adab40b4c118f06f320e4ca42cf99af1902b983c1f702fb0d4369a4d67baadc05146a0dac7a012448e6aac0bee2e5add04a2ee39d13f012d55013a0d4d45c72eec4dcfa1f8690d72962a1b51f9113abc2168ca85383d77185f79aaee6150014132152d600ca439258eabc4ac44eec1cc0dbd6707017e481104c2e43f3c01367f3c0f17e095e9ccab88881726cdee348ceb69ac057143893e87798d6ffa0f10c9b504e0f76a3074c16172808c0e34d2f3755751312629cd1ca5b86646611bfa5733c208d2187a37e230305d8b39ef0945187fc70e99cc5cc3cfb7db84bf1c7ae7776d4f081e3d9fe0a5ccecf7c563255b4c0c100e486dc46c0e189d3733370353afee13a2a0ca7398fb3bab9ed78ecc47a4499974a1c21095475493932c81b6039c8ef9e8662f9bb96e6803a5f04669651423ed3f3b2e22a993b3b8ae2d58a75d13c54938621fab1fd232e2adaeabfae88eaa930344db4d83b97d96c5ed103cea8373d710fc036f45282153dfa2620059273dc005fa6fd1be0b15d25f9a947d8cdd4f7ca98cd9919267fe63057286c394a14e35fb60def7107c47284e50d00877bb16dad59bbf030ca3ecd3699deb0bb467b59d5845a78041f4b86d48e9b5dbbbce08118e8ac869e82cf4b638b4d7b4ffdcbfd240ba4a522691f0376087796de406ba619edb8a01ac7ca120d5c00bb6313ee37438bc1f5c0bcac526c67695981c40417d7029ed45f9461c77de385e14ee65689e7cd31198ed6afe9a9dc58eab6f84b721b4ee5cfc7d1cdd9504a7be7514e448e13130602d30c37c09d0cce8c909919a6074a904eafe15c8da8c1821bce1eb705b7af1d4aadfa3189752bb6823a794cf5f541c354a80920522c3bf8802cc151bb0f7812bb3437cc36fba9a4f23519fc81788a60db36029b820c08ef571822ecc884ee98e07e793a20cb14b3ab5b0e271ef2e646d518e3b979922608a8c2adf859b121313d863854eda35ba9f2c3eca9515aafd7fcd0eedb964b137ab81e8793610130cd3d96eab1134f33aeb56f00ef49f682987f6dbafa916044fbc05594eb3c0d3e265c889250a111be4d1d56c361edade6931e0bd7e4b5134fa49880d739273a499f70aeab1ad63d9f932b548b16d3ab7f70af4c91ec789d38dced4c3ee4cc5bb814b1fcc34f761542022a5ed813351006fcf41d3fdaf74ce33f2441615a2a9a9e16e71f816b2ff0ec31b756ccffe12fc44646ca51b4fb66ee087b0c7f12d4300172ccb92d525994e44768b9f5b0f0317261ce522ab8069600003b537758d0752b6c8b74713e1664d18365384477804eb6d94aed919764fbb5c4622435b76753409b2f10a0cd15d87329c75109eb796971682580085d92d7c97bbf9547b8b9a1019cf3ed923c019fe46b4375f37f5df9dec9e65416d0e17a67afe7ff83f44ef004721987223d8f867d55733c16f28885b92e6716c75f873af06ef863c21d3772086e972d576eb933bead60556158520fe6c02e037df68e617b0ad32920784adf5014a3085b95628114dfab2da7e50eba14583f79b6d55cc2260d754e4d0f66c0e1fcbdb0c982375ea63cb0e84589313d2962768b8158e90376cd80adad46e7be60ddd52d6a4b5ed7bfd8bf6357f13e2325c14a9e7706a29400dba8a6fe73d413378544da89fb5503648ca0d47d1d601b157a0c6cc0fee6e7f6fd5173ef5a3f2f5bf177351f1b1c90a2480eeb612bacb9169543283102e941c0f35698b2b4faf17c2cac5d5c4f493c8ccba0d991c9313401ecc2f67924480a7f3b736662bc044c92bf386f9e479bf62e02fae626a2e72536d98b0d30abcfa58f2628213460a3b9c6f6a49f7ba502d2e4e332e50d2377d759f54f8608eda9dcbe76bbe7e8d25982dd146708b48135b2102079e4186a7ecd77df725e02fcf5b77cd5253018e3e23ce070e0c1ca57f70b1f435438a03abd4d53fff895957ea587033ecd98217cb37accaa112196578678a6a2121bc470f2572f002a6709e2d887a4ad14fe58245ce637d7ce0dddfd1bf4963b2a70ca3393db003ba274a58138383288ce122e97b7fe320c899dd7f0ffc329be441e73c079f375a2bbd8ea1a820a992d548dfe456bbe2bd34e707a9a97dd9929bd4c59a2f66d533a8ec71552e5494cc81f2822623e5c909d5144249f89199dd473b7ddf30abb15dd9cda06f33341ca9037309d8df627c055fa3bca567432df4677220cbdca1511ec76bced1e8ccc5e94887a9db6c489744de2d1b20a7d9e37f1ecbf6746dc284cc3687dd995fbad51f8200dd8575a733f9156a48b8273730cf0013c229179ab6b4797a8214192e77a17a72655e7acb5bbfb2d4ff44eb2543463943ef0738c9a3afaad9f1814b9018389cb42840f50427bc218860c6c73ed574fdaccd356de614e674184e32acf41f21b79678020f485c7cdec6bf6ecdfde74f371139b5fd4d160a8880ae6c0f46680aa5bf1655b7eead15ac0261448f231d35890ac7f3c78917f6671c5772d2ea8a931c0abc02db63df2980518c26a5649c5fd9c8c45928d53d6ad0a22430b777016ff5853120d1266ac9d12bbe51383e599c97ba86c4a371ccd138e3b3eb3a8452625ef29e707af4641be49d30c364b09980f6e1a33ceead66647346bf60a14fcd9ab684f6b6b836ee78532f6c5759c29b05cee56a0cf8c915cca9e97404b280299352145acd65b30921fe7034d242477daacfca449cdbf06bafb71263dae1b60daf05b7d014a0669ae920352205dd6d931fd7de3acf2dcd811ee201b730213e0c28c8fe3a0c583bed22f390becda35de85564419924d6e5875c06371da9c73e31d429b92905eca918b81ca1e527d39ab08a2c6207257b2adfafbc1da18ecd096eef856f8d0dc12b0694d644fb28311c4d3d3a28aef6408c669951cba99faa298d2940fcb23fd80cf50503ae21332de913e6b1dcc139c00980968660cd6672e2d12ee5779fdc7f862f01b8408c5d681316ee37238dcdd64f270c0855f25e17f97c1b727908c722b8b63b78b68fb8f13a2c14d6336327626a94c845f39fa08c756b9f78d8be496f75cf746f658edc47e074910572df376eb6d2d18dcd421c9f0731c53178a6b1e473344adcd3320bb3c5362b7afb2c3dd72533d171fecf81c0b38d161fb563b07661c697892abadf67520e0c3c8b2852a70ff0669d76a5d7fc1afe62c7c99f14f032a43931057c09cf0a846b1718c1"}) io_setup(0x200, &(0x7f00000002c0)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r3, &(0x7f0000000000)=""/159, 0x9f, 0x200000) io_submit(r2, 0x1, &(0x7f0000002ac0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x4400, r0, 0x0, 0x0, 0x2, 0x0, 0x3, r3}]) 16:41:45 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000703000018000000", @ANYRES32=r0, @ANYBLOB="4b0e0000040000002e2f66696c653000"]) r3 = socket$packet(0x11, 0x2, 0x300) dup2(r3, r3) r4 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup2(r4, r4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x0) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f00000001c0)=0x5, 0x4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000180)={@remote, r7}, 0x14) sendfile(r0, r1, 0x0, 0xfdef) 16:41:45 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:41:45 executing program 1: clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) 16:41:45 executing program 1: clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) 16:41:55 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:41:55 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:41:55 executing program 2: rt_sigtimedwait(0x0, 0x0, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000400)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x2a, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0xf, 0x4, @thr={&(0x7f0000000080)="ce13410eb537b964b3030e9edf7f6c94658be9a089", &(0x7f00000000c0)="6a0a5b82f7b5048f5850ac7e4006d772ef473bafc3d220f5ad246f368fe5a56a53b3a3d9"}}, &(0x7f0000000180)) timer_settime(r1, 0x1, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 16:41:55 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) write$binfmt_aout(r0, &(0x7f00000000c0)={{0x107, 0x3f, 0x8, 0x128, 0x1a4, 0xfff, 0x1d7, 0x10001}, "b1af8def167e85b21a317996f4b8a6c73279276d1e2d99e7a45c8a8f185b39ac6a6665977c961d0fb25f48f3a633f9f4256930b579a85e947c97c3b45956e436d2309c5f2387dd9ce64730f3aa22990754354dcd3365f40445d7dee5120359fe9c62bb3b4608582350c9609a42d284a3e3592bd3d2b66ebd90a7"}, 0x9a) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x4010, r1, 0xa8a38000) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000003c0)={{r1}, "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"}) io_setup(0x200, &(0x7f00000002c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r2, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:41:55 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:41:55 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:41:55 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) [ 267.351141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.360852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.374982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.410955] cgroup: fork rejected by pids controller in /syz3 16:42:04 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) 16:42:04 executing program 2: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:42:04 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) 16:42:04 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:42:04 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) write$binfmt_aout(r0, &(0x7f00000000c0)={{0x107, 0x3f, 0x8, 0x128, 0x1a4, 0xfff, 0x1d7, 0x10001}, "b1af8def167e85b21a317996f4b8a6c73279276d1e2d99e7a45c8a8f185b39ac6a6665977c961d0fb25f48f3a633f9f4256930b579a85e947c97c3b45956e436d2309c5f2387dd9ce64730f3aa22990754354dcd3365f40445d7dee5120359fe9c62bb3b4608582350c9609a42d284a3e3592bd3d2b66ebd90a7"}, 0x9a) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x4010, r1, 0xa8a38000) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000003c0)={{r1}, "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"}) io_setup(0x200, &(0x7f00000002c0)) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:42:04 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:42:04 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x800000000000007d}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) fallocate(0xffffffffffffffff, 0x4, 0x8, 0x3f) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_io_uring_complete(0x0) write(r0, &(0x7f0000000380)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x7ff) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000240)=0x7f, 0x0, 0x4) r3 = socket$inet(0x2, 0x8000a, 0x4f3) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000001c0)) fcntl$setstatus(r0, 0x4, 0x44000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff) sendfile(r0, r2, 0x0, 0xfdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1814c2, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(r1, 0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000300)={0x0, r5, 0x1, 0x3, 0x0, 0x9}) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) 16:42:04 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 276.720464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.728685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.732752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.784083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.797582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:42:04 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) 16:42:04 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:04 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) clone3(0x0, 0x0) 16:42:04 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) write$binfmt_aout(r0, &(0x7f00000000c0)={{0x107, 0x3f, 0x8, 0x128, 0x1a4, 0xfff, 0x1d7, 0x10001}, "b1af8def167e85b21a317996f4b8a6c73279276d1e2d99e7a45c8a8f185b39ac6a6665977c961d0fb25f48f3a633f9f4256930b579a85e947c97c3b45956e436d2309c5f2387dd9ce64730f3aa22990754354dcd3365f40445d7dee5120359fe9c62bb3b4608582350c9609a42d284a3e3592bd3d2b66ebd90a7"}, 0x9a) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x4010, r1, 0xa8a38000) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000003c0)={{r1}, "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"}) io_setup(0x200, &(0x7f00000002c0)) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:42:04 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:42:04 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) clone3(0x0, 0x0) 16:42:04 executing program 2: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:42:05 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:05 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) clone3(0x0, 0x0) [ 277.149274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.161694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.181611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:42:14 executing program 2: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:42:14 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) fork() fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r5, 0x0, 0x0, 0x4) 16:42:14 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:14 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) write$binfmt_aout(r0, &(0x7f00000000c0)={{0x107, 0x3f, 0x8, 0x128, 0x1a4, 0xfff, 0x1d7, 0x10001}, "b1af8def167e85b21a317996f4b8a6c73279276d1e2d99e7a45c8a8f185b39ac6a6665977c961d0fb25f48f3a633f9f4256930b579a85e947c97c3b45956e436d2309c5f2387dd9ce64730f3aa22990754354dcd3365f40445d7dee5120359fe9c62bb3b4608582350c9609a42d284a3e3592bd3d2b66ebd90a7"}, 0x9a) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x4010, r1, 0xa8a38000) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000003c0)={{r1}, "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"}) io_setup(0x200, &(0x7f00000002c0)) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/159, 0x9f, 0x200000) [ 286.868964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:42:14 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) 16:42:14 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:14 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) clone3(&(0x7f0000000500)={0x0, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) 16:42:14 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 286.873155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.879615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.948529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.960215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:42:14 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) fork() fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:14 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) 16:42:14 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x800000000000007d}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fff, 0x8}, 0x80, 0x9, 0x0, 0x1, 0x8001, 0x6, 0x8a81, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0xd7ede9b8d2555a0a) fallocate(0xffffffffffffffff, 0x4, 0x8, 0x3f) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = syz_io_uring_complete(0x0) write(r0, &(0x7f0000000380)="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", 0x200) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x7ff) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000240)=0x7f, 0x0, 0x4) r3 = socket$inet(0x2, 0x8000a, 0x4f3) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f00000001c0)) fcntl$setstatus(r0, 0x4, 0x44000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff) sendfile(r0, r2, 0x0, 0xfdef) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1814c2, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ftruncate(r1, 0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000300)={0x0, r5, 0x1, 0x3, 0x0, 0x9}) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e24, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c) 16:42:15 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:15 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) write$binfmt_aout(r0, &(0x7f00000000c0)={{0x107, 0x3f, 0x8, 0x128, 0x1a4, 0xfff, 0x1d7, 0x10001}, "b1af8def167e85b21a317996f4b8a6c73279276d1e2d99e7a45c8a8f185b39ac6a6665977c961d0fb25f48f3a633f9f4256930b579a85e947c97c3b45956e436d2309c5f2387dd9ce64730f3aa22990754354dcd3365f40445d7dee5120359fe9c62bb3b4608582350c9609a42d284a3e3592bd3d2b66ebd90a7"}, 0x9a) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x4010, r1, 0xa8a38000) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000003c0)={{r1}, "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"}) r2 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r2, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:42:15 executing program 2: r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000008, 0x4010, r0, 0x9e5e6000) clone3(&(0x7f00000003c0)={0x70012000, 0x0, &(0x7f00000000c0), 0x0, {}, &(0x7f0000000140)=""/58, 0x3a, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) sendmmsg$inet6(r1, &(0x7f00000056c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}}], 0x1, 0x0) 16:42:25 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) 16:42:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)) ioctl$TCFLSH(r0, 0x540b, 0x0) 16:42:25 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) fork() fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:25 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:25 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) write$binfmt_aout(r0, &(0x7f00000000c0)={{0x107, 0x3f, 0x8, 0x128, 0x1a4, 0xfff, 0x1d7, 0x10001}, "b1af8def167e85b21a317996f4b8a6c73279276d1e2d99e7a45c8a8f185b39ac6a6665977c961d0fb25f48f3a633f9f4256930b579a85e947c97c3b45956e436d2309c5f2387dd9ce64730f3aa22990754354dcd3365f40445d7dee5120359fe9c62bb3b4608582350c9609a42d284a3e3592bd3d2b66ebd90a7"}, 0x9a) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x4010, r1, 0xa8a38000) r2 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r2, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:42:25 executing program 1: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000100)) clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:42:25 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) fork() fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r5, 0x0, 0x0, 0x4) 16:42:25 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) fcntl$setstatus(r0, 0x4, 0x44000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0401, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x0, 0x0, 0x4) sendfile(r2, r1, 0x0, 0xfdef) [ 297.295044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.315553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:42:25 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in=@initdev, @in=@broadcast}}, {{@in6=@private2}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="005055a423b1b88bee74da70fb17000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=r5, @ANYBLOB="1400038008000200000000000400040004000100"], 0x34}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x6f, r5}) shutdown(r0, 0x1) 16:42:25 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:25 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) write$binfmt_aout(r0, &(0x7f00000000c0)={{0x107, 0x3f, 0x8, 0x128, 0x1a4, 0xfff, 0x1d7, 0x10001}, "b1af8def167e85b21a317996f4b8a6c73279276d1e2d99e7a45c8a8f185b39ac6a6665977c961d0fb25f48f3a633f9f4256930b579a85e947c97c3b45956e436d2309c5f2387dd9ce64730f3aa22990754354dcd3365f40445d7dee5120359fe9c62bb3b4608582350c9609a42d284a3e3592bd3d2b66ebd90a7"}, 0x9a) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:42:25 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:25 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) fcntl$setstatus(r0, 0x4, 0x44000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0401, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x0, 0x0, 0x4) sendfile(r2, r1, 0x0, 0xfdef) 16:42:25 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:25 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) fork() fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r5, 0x0, 0x0, 0x4) 16:42:25 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) fork() fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r5, 0x0, 0x0, 0x4) 16:42:25 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:42:25 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:25 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 297.779433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.793429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:42:34 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:34 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) write$binfmt_aout(r0, &(0x7f00000000c0)={{0x107, 0x3f, 0x8, 0x128, 0x1a4, 0xfff, 0x1d7, 0x10001}, "b1af8def167e85b21a317996f4b8a6c73279276d1e2d99e7a45c8a8f185b39ac6a6665977c961d0fb25f48f3a633f9f4256930b579a85e947c97c3b45956e436d2309c5f2387dd9ce64730f3aa22990754354dcd3365f40445d7dee5120359fe9c62bb3b4608582350c9609a42d284a3e3592bd3d2b66ebd90a7"}, 0x9a) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:42:34 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:34 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() kcmp(r5, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:42:34 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:34 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:34 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:34 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) [ 306.293124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.301307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:42:34 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:34 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:34 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:34 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 306.435491] cgroup: fork rejected by pids controller in /syz4 16:42:34 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:34 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:34 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:34 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:42:34 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:34 executing program 5: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) write$binfmt_aout(r0, &(0x7f00000000c0)={{0x107, 0x3f, 0x8, 0x128, 0x1a4, 0xfff, 0x1d7, 0x10001}, "b1af8def167e85b21a317996f4b8a6c73279276d1e2d99e7a45c8a8f185b39ac6a6665977c961d0fb25f48f3a633f9f4256930b579a85e947c97c3b45956e436d2309c5f2387dd9ce64730f3aa22990754354dcd3365f40445d7dee5120359fe9c62bb3b4608582350c9609a42d284a3e3592bd3d2b66ebd90a7"}, 0x9a) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:42:44 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() kcmp(r5, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:42:44 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:42:44 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:44 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:44 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:44 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() kcmp(r5, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:42:44 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r0, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:42:44 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:44 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 316.688092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.719519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:42:44 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:44 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r0, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:42:55 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:55 executing program 7: syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:42:55 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:55 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() kcmp(r5, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:42:55 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:55 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:55 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r0, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:42:55 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 327.277390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:42:55 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 327.299195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:42:55 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:55 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:55 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r0, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:42:55 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:55 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r1 = timerfd_create(0xa, 0x0) close_range(r1, r0, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:42:55 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() kcmp(0x0, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) [ 327.517978] cgroup: fork rejected by pids controller in /syz0 16:42:55 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r0, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:43:05 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:05 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:05 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() kcmp(0x0, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:43:05 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:05 executing program 7: syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:43:05 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r0, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:43:05 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:05 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') timerfd_create(0xa, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 337.966851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:43:05 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:05 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:43:05 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 338.078247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:43:06 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:06 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:06 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) [ 338.369105] cgroup: fork rejected by pids controller in /syz2 16:43:06 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() kcmp(0x0, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:43:06 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:06 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:06 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:06 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:06 executing program 6: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) [ 341.396637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.399146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.400662] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.405591] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.407770] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.429931] Bluetooth: hci1: command tx timeout [ 345.478897] Bluetooth: hci1: command tx timeout [ 347.526868] Bluetooth: hci1: command tx timeout [ 349.574054] Bluetooth: hci1: command tx timeout [ 359.528018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.529244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.594533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.595686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.707318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.712685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:43:39 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:39 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() kcmp(0x0, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:43:39 executing program 7: syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:43:39 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:39 executing program 6: io_submit(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:43:39 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:39 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:43:39 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 371.353256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.365910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:43:39 executing program 6: io_submit(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:43:39 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:39 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:39 executing program 6: io_submit(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:43:39 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:39 executing program 6: io_submit(0x0, 0x0, &(0x7f0000000300)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:43:49 executing program 7: syz_80211_inject_frame(0x0, &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:43:49 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:49 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:49 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:49 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:49 executing program 6: io_submit(0x0, 0x0, &(0x7f0000000300)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:43:49 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:43:49 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 381.532520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:43:49 executing program 6: io_submit(0x0, 0x0, &(0x7f0000000300)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:43:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:49 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:43:49 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:43:49 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:00 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:44:00 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:00 executing program 7: syz_80211_inject_frame(0x0, &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:44:00 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:00 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:44:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 392.386020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:44:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:00 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:44:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:00 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:00 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:44:00 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:10 executing program 7: syz_80211_inject_frame(0x0, &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:44:10 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:10 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:10 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:10 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:44:10 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:10 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:44:10 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 402.408666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:44:10 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:10 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:10 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:10 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:44:10 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') timerfd_create(0xa, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:10 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 402.586760] cgroup: fork rejected by pids controller in /syz5 16:44:10 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:10 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 402.741677] cgroup: fork rejected by pids controller in /syz1 16:44:20 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') timerfd_create(0xa, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:20 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:20 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:44:20 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:20 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') timerfd_create(0xa, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:20 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:44:20 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:20 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:44:20 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 412.836613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.861767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.873065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:44:20 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:44:20 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:20 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:20 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:20 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:20 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') timerfd_create(0xa, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:20 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:44:30 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:30 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') timerfd_create(0xa, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:30 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') timerfd_create(0xa, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:30 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:44:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:30 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532", 0x9}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:44:30 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:44:30 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:30 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532", 0x9}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:44:30 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 422.706377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.720315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.740547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:44:30 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:30 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532", 0x9}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:44:39 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:44:39 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:44:39 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:39 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:39 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') close_range(0xffffffffffffffff, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:39 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') close_range(0xffffffffffffffff, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:39 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472", 0xd}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:44:39 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 431.914579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.922409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.928650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:44:39 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:39 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:39 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:39 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472", 0xd}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:44:39 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:39 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:50 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472", 0xd}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:44:50 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:50 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') close_range(0xffffffffffffffff, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:50 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(0x0, &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:44:50 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:44:50 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:50 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') close_range(0xffffffffffffffff, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 442.192555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.212638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:44:50 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e5", 0xf}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:44:50 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:50 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:50 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e5", 0xf}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:44:50 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:50 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:44:50 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(0x0, &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:44:50 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e5", 0xf}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:44:50 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:44:50 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') close_range(0xffffffffffffffff, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 442.713570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.725619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:45:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:00 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:00 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(0x0, &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:45:00 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = timerfd_create(0xa, 0x0) close_range(r1, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:00 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a", 0x10}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:45:00 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000300)) r4 = fork() r5 = fork() kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:45:00 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') close_range(0xffffffffffffffff, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:00 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 453.048175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.064933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:45:01 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a", 0x10}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:45:01 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:01 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:01 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:01 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = timerfd_create(0xa, 0x0) close_range(r1, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:01 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:12 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = timerfd_create(0xa, 0x0) close_range(r1, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:12 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:45:12 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a", 0x10}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:45:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:12 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, 0xffffffffffffffff, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:12 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:12 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:12 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000300)) r4 = fork() r5 = fork() kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) [ 464.449002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.459936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.463924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:45:12 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:12 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:12 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:45:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:12 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, 0xffffffffffffffff, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:12 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:45:12 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:12 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 466.373996] Bluetooth: hci1: command 0x0406 tx timeout 16:45:22 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:45:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:22 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:22 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, 0xffffffffffffffff, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:22 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:22 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000300)) r4 = fork() r5 = fork() kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:45:22 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) [ 474.942492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:45:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 474.963165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:45:22 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 474.982092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:45:22 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r0, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:45:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:32 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:32 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:32 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:45:32 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x8, r1, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:32 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r0, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:45:32 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:32 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) r3 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000300)) r4 = fork() r5 = fork() kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:45:32 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 484.381426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.398546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.412669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:45:32 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r0, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:45:32 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:32 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:32 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:32 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:45:32 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:32 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:32 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:41 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x8, r1, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:41 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:45:41 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:45:41 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:41 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:41 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:41 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:41 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) r3 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000300)) r4 = fork() r5 = fork() kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:45:41 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:41 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 493.305281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.322631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.345996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:45:41 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:41 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:45:41 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:41 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:41 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) r3 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000300)) r4 = fork() r5 = fork() kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:45:41 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:51 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:51 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:45:51 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:45:51 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:51 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:51 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x8, r1, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:51 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:45:51 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:51 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 503.534085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.549986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.562148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:45:51 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:51 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:51 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:51 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:45:51 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:51 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:45:51 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 16:45:51 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:51 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:51 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:45:51 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 16:45:51 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) [ 504.052928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.057270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.062976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:46:01 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:46:01 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0x0, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:46:01 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:46:01 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:01 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:01 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:01 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) [ 513.876727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.896968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.920082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:46:12 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0x0, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:12 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0x0, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:46:12 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:12 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(0xffffffffffffffff, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:46:12 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:12 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') timerfd_create(0xa, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) r2 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000300)) r3 = fork() r4 = fork() kcmp(r3, r4, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r5, 0x0, 0x0, 0x4) 16:46:12 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 524.600644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.618710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.636025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:46:12 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(0xffffffffffffffff, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:46:12 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0x0, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:12 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:12 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:12 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(0xffffffffffffffff, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:46:12 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:12 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0x0, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:46:12 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r1 = timerfd_create(0xa, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:12 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0x0, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 525.118994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.137042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.149002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:46:13 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') timerfd_create(0xa, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) r2 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000300)) r3 = fork() r4 = fork() kcmp(r3, r4, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r5, 0x0, 0x0, 0x4) 16:46:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:22 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r1 = timerfd_create(0xa, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:22 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:46:22 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') timerfd_create(0xa, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) r2 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000300)) r3 = fork() r4 = fork() kcmp(r3, r4, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r5, 0x0, 0x0, 0x4) 16:46:22 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:22 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, 0x0, 0x0, 0x200000) 16:46:22 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 534.894062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.922023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:46:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 534.943111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:46:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:22 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:23 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, 0x0, 0x0, 0x200000) 16:46:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 16:46:23 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:33 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') close_range(0xffffffffffffffff, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r3 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000300)) r4 = fork() r5 = fork() kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:46:33 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:33 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, 0x0, 0x0, 0x200000) 16:46:33 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:46:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 16:46:33 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:33 executing program 0: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r1 = timerfd_create(0xa, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r0, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:33 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(0x0, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) [ 545.510167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.526961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.540091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:46:33 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:46:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 16:46:33 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:33 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x0) 16:46:33 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:46:33 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0x0, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:42 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0x0, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:42 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:42 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') close_range(0xffffffffffffffff, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r3 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000300)) r4 = fork() r5 = fork() kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:46:42 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:42 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(0x0, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:46:42 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:42 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 554.550109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:46:42 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 554.563495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.582998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:46:42 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:42 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:42 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:42 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0x0, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:42 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:42 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:42 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(0x0, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:46:42 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0x0, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:42 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:42 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:46:43 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') close_range(0xffffffffffffffff, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r3 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000300)) r4 = fork() r5 = fork() kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) [ 555.132002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:46:43 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 557.910232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 557.914460] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 557.916469] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 557.925926] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 557.929214] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 559.941904] Bluetooth: hci1: command tx timeout [ 561.990043] Bluetooth: hci1: command tx timeout [ 564.038948] Bluetooth: hci1: command tx timeout [ 566.085969] Bluetooth: hci1: command tx timeout [ 575.561298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.564216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.630632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.631740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.738187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.743438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.747595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:47:12 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') close_range(0xffffffffffffffff, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r3 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000300)) r4 = fork() r5 = fork() kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:47:12 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, 0xffffffffffffffff, 0x4) r3 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000300)) r4 = fork() r5 = fork() kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:47:12 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:12 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:12 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:12 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, 0x0, 0x0) 16:47:12 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:12 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:12 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') timerfd_create(0xa, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) r2 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r2, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000300)) r3 = fork() r4 = fork() kcmp(r3, r4, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r5, 0x0, 0x0, 0x4) [ 584.614094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.628094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.647153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:47:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:12 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, 0xffffffffffffffff, 0x4) r3 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000300)) r4 = fork() r5 = fork() kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:47:12 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:12 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:12 executing program 1: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(0xffffffffffffffff, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:47:12 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:12 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:12 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, 0xffffffffffffffff, 0x4) r3 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000300)) r4 = fork() r5 = fork() kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:47:22 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, 0x0, 0x0) 16:47:22 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:22 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:22 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x8, r1, 0x4) r3 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000300)) r4 = fork() r5 = fork() kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:47:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:22 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:47:22 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 594.993396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:47:22 executing program 5: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:47:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 595.123921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:47:23 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:23 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:23 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:23 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:47:23 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x8, r1, 0x4) r3 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000300)) r4 = fork() r5 = fork() kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:47:23 executing program 1: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a11", 0x11}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) [ 597.843140] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 597.845281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 597.850310] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 597.855952] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 597.859964] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 599.877908] Bluetooth: hci1: command tx timeout [ 601.927183] Bluetooth: hci1: command tx timeout [ 603.974176] Bluetooth: hci1: command tx timeout [ 606.021885] Bluetooth: hci1: command tx timeout [ 615.639972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.641652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.675681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.676844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.809791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.819148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.827751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:47:54 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(0x0, 0x0) 16:47:54 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:54 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, 0x0, 0x0) 16:47:54 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x8, r1, 0x4) r3 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000300)) r4 = fork() r5 = fork() kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:47:54 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:54 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:54 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:54 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:54 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 626.169820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.176243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.188350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:47:54 executing program 6: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) r3 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000300)) r4 = fork() r5 = fork() kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:47:54 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(0x0, 0x0) 16:47:54 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:54 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:54 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(0x0, 0x0) 16:47:54 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:47:54 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(0x0, 0x0) 16:47:54 executing program 6: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) [ 626.702082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.717976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.739080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:47:54 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:47:54 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) [ 626.824679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.846624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 626.874876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:48:06 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:48:06 executing program 6: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:48:06 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:06 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0x0, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:06 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) r3 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000300)) r4 = fork() r5 = fork() kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:48:06 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:48:06 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:06 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) [ 638.828301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.838850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.862955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.862964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.883312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.886588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:48:16 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0x0, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:16 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:16 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) r3 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000300)) r4 = fork() r5 = fork() kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:48:16 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:48:16 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:16 executing program 6: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb, 0x1}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:48:16 executing program 5: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:48:16 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) [ 648.128659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.133362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.134499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.138213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.141871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.145994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:48:16 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:48:16 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:16 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:16 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:48:16 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:48:16 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0x0, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:16 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 648.561462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.578942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:48:16 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0x0, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 648.587132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:48:16 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0x0, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:16 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:16 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:16 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:16 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:16 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:16 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:16 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:48:16 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:16 executing program 5: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:48:16 executing program 6: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e52a", 0x10}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) [ 649.039470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.057854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.063080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.076105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.089839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:48:17 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 649.111293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:48:28 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:28 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:48:28 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:28 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:28 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:28 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:28 executing program 5: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:48:28 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) [ 660.312515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.322009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.331641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.333407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.358021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:48:28 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 660.374953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:48:28 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:48:37 executing program 5: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b}, @ver_80211n={0x0, 0x4}}, @ntf_ch_w}, 0x1f) 16:48:37 executing program 7: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}}, @ntf_ch_w}, 0x1f) 16:48:37 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:48:37 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:48:37 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:37 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:37 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:37 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) r3 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000300)) r4 = fork() r5 = fork() kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) [ 669.956845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 669.995410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:48:37 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:37 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 670.021631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.040559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:48:37 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:48:38 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:48:38 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 672.721203] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 672.724029] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 672.727665] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 672.733166] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 672.748185] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 674.821888] Bluetooth: hci1: command tx timeout [ 676.870867] Bluetooth: hci1: command tx timeout [ 678.917912] Bluetooth: hci1: command tx timeout [ 680.966850] Bluetooth: hci1: command tx timeout [ 689.949953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.951082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.985479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.986583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.086286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.091248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 690.095693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:49:14 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:14 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:14 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:14 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) r3 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000300)) r4 = fork() r5 = fork() kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:49:14 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:49:14 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:14 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:49:14 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:14 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:14 executing program 7: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') close_range(0xffffffffffffffff, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:14 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:49:14 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:14 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:15 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:15 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:15 executing program 6: clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:15 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:24 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:24 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:24 executing program 6: clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:24 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:24 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r0, 0x8, r1, 0x4) r3 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r3, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000300)) r4 = fork() r5 = fork() kcmp(r4, r5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x0, 0x0, 0x4) 16:49:24 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:24 executing program 1: io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)="5399593869b613a532b989d472a0e5", 0xf}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) 16:49:24 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:24 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:49:24 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:24 executing program 6: clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:24 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:24 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:24 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:24 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:49:25 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:33 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:33 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:33 executing program 7: clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:33 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:49:33 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:33 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:33 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:33 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:33 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:33 executing program 5: clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:33 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:42 executing program 6: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:42 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:42 executing program 1: clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:42 executing program 7: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:42 executing program 5: clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:42 executing program 3: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:49:42 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:42 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:42 executing program 5: clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:42 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:42 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:42 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:42 executing program 6: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:42 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:42 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:53 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:53 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:53 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:53 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:49:53 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:53 executing program 6: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:53 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:53 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) fcntl$setstatus(r0, 0x4, 0x44000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0401, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x0, 0x0, 0x4) sendfile(r2, r1, 0x0, 0xfdef) 16:49:53 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:53 executing program 6: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:53 executing program 2: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@ctrl_frame=@ack={{}, {0x4}, @device_b}, 0xa) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f0000000100)=@mgmt_frame=@disassoc={@with_ht={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_a, @broadcast, @random="bc406dec03f7", {0x2, 0x2}}, @ver_80211n={0x0, 0x80, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x31, @val={0x8c, 0x10, {0x194, "7c717fcc0229", @short="185f795d8ac5cfff"}}}, 0x30) [ 745.786908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.794075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.818030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:49:53 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) (fail_nth: 1) [ 745.828104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:49:53 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:53 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:49:53 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:49:53 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 745.962463] FAULT_INJECTION: forcing a failure. [ 745.962463] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 745.964263] CPU: 1 UID: 0 PID: 25513 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 745.964293] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 745.964306] Call Trace: [ 745.964314] [ 745.964323] dump_stack_lvl+0xfa/0x120 [ 745.964379] should_fail_ex+0x4d7/0x5e0 [ 745.964435] _copy_from_user+0x30/0xd0 [ 745.964482] copy_clone_args_from_user+0x152/0x7a0 [ 745.964522] ? get_pid_task+0xfd/0x250 [ 745.964556] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 745.964594] ? get_pid_task+0x107/0x250 [ 745.964624] ? proc_fail_nth_write+0x97/0x220 [ 745.964659] ? find_held_lock+0x2b/0x80 [ 745.964684] ? ksys_write+0x121/0x240 [ 745.964710] ? lock_is_held_type+0x9e/0x120 [ 745.964747] __do_sys_clone3+0xa5/0x280 [ 745.964779] ? __pfx___do_sys_clone3+0x10/0x10 [ 745.964843] ? perf_trace_run_bpf_submit+0xef/0x180 [ 745.964873] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 745.964896] ? perf_trace_run_bpf_submit+0xef/0x180 [ 745.964941] ? perf_trace_preemptirq_template+0x259/0x430 [ 745.964989] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 745.965033] ? __pfx_ksys_write+0x10/0x10 [ 745.965086] do_syscall_64+0xbf/0x420 [ 745.965121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.965146] RIP: 0033:0x7fd4e7ae4b19 [ 745.965165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 745.965186] RSP: 002b:00007fd4e505a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 745.965208] RAX: ffffffffffffffda RBX: 00007fd4e7bf7f60 RCX: 00007fd4e7ae4b19 [ 745.965222] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 745.965236] RBP: 00007fd4e505a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 745.965249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.965262] R13: 00007ffcbacfba2f R14: 00007fd4e505a300 R15: 0000000000022000 [ 745.965322] [ 746.131126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.134054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:50:03 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) (fail_nth: 2) 16:50:03 executing program 5: perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:03 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:03 executing program 2: ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {0x200}, @broadcast, @device_a, @initial, {0x6}}}, @ntf_ch_w}, 0x1f) 16:50:03 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:50:03 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) fcntl$setstatus(r0, 0x4, 0x44000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0401, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x0, 0x0, 0x4) sendfile(r2, r1, 0x0, 0xfdef) 16:50:03 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:03 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 756.065955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.079287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.084783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.140961] FAULT_INJECTION: forcing a failure. [ 756.140961] name failslab, interval 1, probability 0, space 0, times 1 [ 756.142867] CPU: 1 UID: 0 PID: 25909 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 756.142898] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 756.142912] Call Trace: [ 756.142922] [ 756.142932] dump_stack_lvl+0xfa/0x120 [ 756.142972] should_fail_ex+0x4d7/0x5e0 [ 756.143031] should_failslab+0xc2/0x120 [ 756.143065] kmem_cache_alloc_node_noprof+0x87/0x780 [ 756.143109] ? copy_process+0x3da/0x74d0 [ 756.143142] ? copy_process+0x460/0x74d0 [ 756.143194] ? copy_process+0x460/0x74d0 [ 756.143223] copy_process+0x460/0x74d0 [ 756.143259] ? tracing_gen_ctx_irq_test+0x167/0x1f0 [ 756.143314] ? lock_acquire+0x15e/0x2d0 [ 756.143349] ? __might_fault+0xe0/0x190 [ 756.143393] ? __pfx_copy_process+0x10/0x10 [ 756.143429] ? __might_fault+0xe0/0x190 [ 756.143474] ? _copy_from_user+0x5b/0xd0 [ 756.143537] kernel_clone+0xea/0x7c0 [ 756.143574] ? __lock_acquire+0x451/0x2250 [ 756.143609] ? __pfx_kernel_clone+0x10/0x10 [ 756.143670] ? lock_acquire+0x15e/0x2d0 [ 756.143705] ? find_held_lock+0x2b/0x80 [ 756.143732] ? finish_task_switch.isra.0+0x1f6/0x840 [ 756.143795] __do_sys_clone3+0x1f5/0x280 [ 756.143831] ? __pfx___do_sys_clone3+0x10/0x10 [ 756.143928] ? perf_trace_preemptirq_template+0x259/0x430 [ 756.143979] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 756.144066] do_syscall_64+0xbf/0x420 [ 756.144104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.144131] RIP: 0033:0x7fd4e7ae4b19 [ 756.144152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 756.144175] RSP: 002b:00007fd4e505a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 756.144198] RAX: ffffffffffffffda RBX: 00007fd4e7bf7f60 RCX: 00007fd4e7ae4b19 [ 756.144214] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 756.144229] RBP: 00007fd4e505a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 756.144243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.144257] R13: 00007ffcbacfba2f R14: 00007fd4e505a300 R15: 0000000000022000 [ 756.144322] 16:50:04 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) fcntl$setstatus(r0, 0x4, 0x44000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0401, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x0, 0x0, 0x4) sendfile(r2, r1, 0x0, 0xfdef) 16:50:04 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:04 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:04 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:04 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:50:04 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:04 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) (fail_nth: 3) [ 756.399519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:50:04 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:04 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) fcntl$setstatus(r0, 0x4, 0x44000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0401, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) pidfd_send_signal(r1, 0x0, 0x0, 0x4) 16:50:04 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:04 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:04 executing program 2: syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @random="0f6ec1657fc2"}, {0xb}}, {@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x20}, @device_b, @device_a, @initial, {0x9, 0x400}}}}}, @a_msdu}, 0x38) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}}, @ntf_ch_w}, 0x1f) 16:50:04 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 756.627780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:50:04 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:04 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) (fail_nth: 4) 16:50:04 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) [ 756.646260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.747616] FAULT_INJECTION: forcing a failure. [ 756.747616] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 756.753968] CPU: 0 UID: 0 PID: 26572 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 756.753986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 756.753993] Call Trace: [ 756.753998] [ 756.754003] dump_stack_lvl+0xfa/0x120 [ 756.754026] should_fail_ex+0x4d7/0x5e0 [ 756.754060] should_fail_alloc_page+0xe0/0x110 [ 756.754079] prepare_alloc_pages+0x1eb/0x550 [ 756.754097] ? __lock_acquire+0x451/0x2250 [ 756.754121] __alloc_frozen_pages_noprof+0x185/0x2070 [ 756.754149] ? lock_acquire+0x15e/0x2d0 [ 756.754165] ? __memcg_slab_post_alloc_hook+0x446/0x970 [ 756.754188] ? find_held_lock+0x2b/0x80 [ 756.754201] ? __memcg_slab_post_alloc_hook+0x4a5/0x970 [ 756.754225] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 756.754250] ? __memcg_slab_post_alloc_hook+0x4af/0x970 [ 756.754277] ? __create_object+0x59/0x80 [ 756.754301] ? kmem_cache_alloc_node_noprof+0x474/0x780 [ 756.754323] ? __asan_memset+0x24/0x50 [ 756.754345] __alloc_pages_noprof+0xc/0x1b0 [ 756.754364] copy_process+0x4f4/0x74d0 [ 756.754395] ? lock_acquire+0x15e/0x2d0 [ 756.754411] ? __might_fault+0xe0/0x190 [ 756.754433] ? __pfx_copy_process+0x10/0x10 [ 756.754451] ? __might_fault+0xe0/0x190 [ 756.754473] ? _copy_from_user+0x5b/0xd0 [ 756.754504] kernel_clone+0xea/0x7c0 [ 756.754520] ? get_pid_task+0xfd/0x250 [ 756.754539] ? __pfx_kernel_clone+0x10/0x10 [ 756.754568] ? find_held_lock+0x2b/0x80 [ 756.754581] ? ksys_write+0x121/0x240 [ 756.754596] ? lock_is_held_type+0x9e/0x120 [ 756.754616] __do_sys_clone3+0x1f5/0x280 [ 756.754633] ? __pfx___do_sys_clone3+0x10/0x10 [ 756.754681] ? perf_trace_preemptirq_template+0x259/0x430 [ 756.754707] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 756.754731] ? __pfx_ksys_write+0x10/0x10 [ 756.754760] do_syscall_64+0xbf/0x420 [ 756.754779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.754793] RIP: 0033:0x7fd4e7ae4b19 [ 756.754804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 756.754816] RSP: 002b:00007fd4e505a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 756.754828] RAX: ffffffffffffffda RBX: 00007fd4e7bf7f60 RCX: 00007fd4e7ae4b19 [ 756.754836] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 756.754843] RBP: 00007fd4e505a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 756.754851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.754857] R13: 00007ffcbacfba2f R14: 00007fd4e505a300 R15: 0000000000022000 [ 756.754890] [ 756.976103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:50:13 executing program 2: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000009c0)=ANY=[@ANYRES16], 0x1f) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000140)=@ctrl_frame=@ack={{}, {0x3}, @device_b}, 0xa) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@ctrl_frame=@bar={{}, {0x7}, @device_b, @device_b, @compressed={{0x1, 0x0, 0x1, 0x0, 0x9}, {0x2, 0x9}}}, 0x14) syz_80211_inject_frame(&(0x7f00000001c0)=@broadcast, &(0x7f0000000200)=@mgmt_frame=@reassoc_resp={@wo_ht={{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @broadcast, @device_a, @initial, {0x7, 0xfc1}}, 0x0, 0x37, @random=0x80, @val, @void, [{0xdd, 0xa7, "9fd2e337ff9fc44e7b3d605a38fd4ec8cca6d9f7c822cdf57fa3293733e41af6167b6d496f58e58834055f61e3dc3b3e286c7dead0ed99e23b0ab8d77c3ff50a5a714feb9a9339bbe8636162ee7605172b7b3f71097b1da77b8f587a5b1ce5d96618691c93a16eee2a89889f853615b4bae50c653ef4ca19119c91885a29043d108317efea772c4885a9b285adad6d46e0ab640ea0095adda8106da06c255e64cdbd529667bf9b"}, {0xdd, 0x62, "2edb728cbcc6518bc96ba5096fc5c67667f27347f4204bf420bdfb42e322a9425a24bdd8e22f1fd8789b2b3a5a56d3407fa1c64644d0e92bd91d613de4631c4c1b2648dc06a6eb2a29128d5b446c961f57e2521b4f78c364c43fa5aea486c047a3a1"}, {0xdd, 0xb3, "491ecf44754355180a9912cd265f88082ec0273257d86b8b7e04e5d936e469d9fee677c802004a16eafb27e352859c982e04aa00b2d057d6fd2c27cd7f8c567a4d01eff4ee230a9a5fbc3148dc3fe81af9a5042cc2c707cbcfa79b0a42133e76c9119f27d7ddf92131bbebc9723477ae8e28d5ed9e46c1bff0aa2df30efa14e8f9cf978c9a40bf15b113d2d595f922e744aa9b58f75fc8f415c972d271b3a8614082608d4146b3b2e38de00a56d6a77c7551e3"}]}, 0x1e2) 16:50:13 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:13 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:13 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:13 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) (fail_nth: 5) 16:50:13 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:50:13 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) fcntl$setstatus(r0, 0x4, 0x44000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc0401, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) [ 765.658612] FAULT_INJECTION: forcing a failure. [ 765.658612] name failslab, interval 1, probability 0, space 0, times 0 [ 765.659673] CPU: 1 UID: 0 PID: 26776 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 765.659691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 765.659698] Call Trace: [ 765.659703] [ 765.659708] dump_stack_lvl+0xfa/0x120 [ 765.659732] should_fail_ex+0x4d7/0x5e0 [ 765.659763] ? prepare_creds+0x2c/0x830 [ 765.659787] should_failslab+0xc2/0x120 [ 765.659805] kmem_cache_alloc_noprof+0x80/0x760 [ 765.659854] ? prepare_creds+0x2c/0x830 [ 765.659873] prepare_creds+0x2c/0x830 [ 765.659898] copy_creds+0x7c/0xa30 [ 765.659927] copy_process+0xeb0/0x74d0 [ 765.659959] ? lock_acquire+0x15e/0x2d0 [ 765.659988] ? __pfx_copy_process+0x10/0x10 [ 765.660008] ? __might_fault+0xe0/0x190 [ 765.660032] ? _copy_from_user+0x5b/0xd0 [ 765.660065] kernel_clone+0xea/0x7c0 [ 765.660082] ? get_pid_task+0xfd/0x250 [ 765.660101] ? __pfx_kernel_clone+0x10/0x10 [ 765.660133] ? find_held_lock+0x2b/0x80 [ 765.660147] ? ksys_write+0x121/0x240 [ 765.660163] ? lock_is_held_type+0x9e/0x120 [ 765.660184] __do_sys_clone3+0x1f5/0x280 [ 765.660202] ? __pfx___do_sys_clone3+0x10/0x10 [ 765.660253] ? perf_trace_preemptirq_template+0x259/0x430 [ 765.660280] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 765.660305] ? __pfx_ksys_write+0x10/0x10 [ 765.660336] do_syscall_64+0xbf/0x420 [ 765.660357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.660371] RIP: 0033:0x7fd4e7ae4b19 [ 765.660383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 765.660395] RSP: 002b:00007fd4e505a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 765.660408] RAX: ffffffffffffffda RBX: 00007fd4e7bf7f60 RCX: 00007fd4e7ae4b19 [ 765.660416] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 765.660424] RBP: 00007fd4e505a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 765.660432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.660439] R13: 00007ffcbacfba2f R14: 00007fd4e505a300 R15: 0000000000022000 [ 765.660473] [ 765.665321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:50:13 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="5ed0b2ff68d76fb346352b602a2a1295cbe01cb3f64fbed9e7f9bc9be0f300cb97f6a204cc586e45dfb949002f61f8fb969dd435dd0c37c5077e5b10cfeafd75205e215b167323a3b971b0ec98e6c3d4d825cae01271cb35cdd091e4872367f354e0dc81a7e4ac79775bc1dcaafe2f5079da79d1989f1ddce6722fc438a7217526cfe75d53471624d6f091e19a7fb699ea27efa9e0fd1914e7c35f297afd9b9b85ff0ce7a982f4fa0c172ea5f06479eec302f30e5df66273717e028f4ca7d4c5b6bc8a3c3c67f688195f22488a15d9e1f7e5fed3a6c2aba7bc308b0e2c5657f4538f4a3bf9b975bb887a901ab3c85261be3e331b741313e78b5ad63b7b1b378e9c79dc4a95b2b4d15cd1d1b808844378f882a72af1e5b0eefd356e0247246e60643204c3b46183dbe4e066c55cb1dcdaa7b70ef43ab2fa4d2b8c4c1a89cb0e325fd9716874d3856cf368efd1f92d21214e55e4de647c37c71887d11f74f9afe1616e3054ceae601e4b3555e243c1882ad42c7730caeb309e7714ad87c55e9fba308cfc4161e562abde3ac4f3d7e0a3584d4928100197f102307c05c0b4b4898b0591bc1433af443478979f28e6136ffb21aaeac2be5490475a08e96bb94fd9d9d3aa2f8a1e147a80ba9bfd04dac3f476ff128476c693ea71f7be47a508c98eddc479eb703d6f17cc5be2182f7c39b0a47eb23e0808b5d87dd2a9ce88eb48a601", 0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) fcntl$setstatus(r0, 0x4, 0x44000) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) 16:50:13 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:13 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) (fail_nth: 6) 16:50:22 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:50:22 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:22 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:22 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:22 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) 16:50:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) (fail_nth: 7) 16:50:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:22 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@secondary) r1 = request_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, r0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r0, 0xb3, 0x50}, 0x0, &(0x7f00000000c0)="b5fef0fa7e68d041aae931d9371ba90fec33c3e899b74ecdff54a8c6a593a6e4dd9ce0bbb52c99beaf02f978266eb582163cd6234332ff2621a4b708e52cc306f8bffde41a24d691f60340de0ee0bc3d65985a57e68e528f6b2987c040e65b614d1e3d852520a42334d7cfe0dc19f7b348bf74206ef80d0c22ee7d33eecbd8be662c132ed7130f00a2a5e6e73d55b52dbae39d5fa51de596ea5468c0ceddf9f8301582086e102dc32b283a21ca12f35142d111", &(0x7f0000000180)=""/80) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}}, @ntf_ch_w}, 0x1f) 16:50:22 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) [ 775.143337] FAULT_INJECTION: forcing a failure. [ 775.143337] name failslab, interval 1, probability 0, space 0, times 0 [ 775.145183] CPU: 0 UID: 0 PID: 27220 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 775.145216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 775.145231] Call Trace: [ 775.145240] [ 775.145250] dump_stack_lvl+0xfa/0x120 [ 775.145293] should_fail_ex+0x4d7/0x5e0 [ 775.145356] should_failslab+0xc2/0x120 [ 775.145391] __kmalloc_noprof+0xd6/0x880 [ 775.145428] ? __create_object+0x59/0x80 [ 775.145473] ? security_prepare_creds+0x101/0x160 [ 775.145528] ? security_prepare_creds+0x101/0x160 [ 775.145562] security_prepare_creds+0x101/0x160 [ 775.145606] prepare_creds+0x55c/0x830 [ 775.145659] copy_creds+0x7c/0xa30 [ 775.145717] copy_process+0xeb0/0x74d0 [ 775.145780] ? lock_acquire+0x15e/0x2d0 [ 775.145844] ? __pfx_copy_process+0x10/0x10 [ 775.145882] ? __might_fault+0xe0/0x190 [ 775.145930] ? _copy_from_user+0x5b/0xd0 [ 775.145993] kernel_clone+0xea/0x7c0 [ 775.146026] ? get_pid_task+0xfd/0x250 [ 775.146063] ? __pfx_kernel_clone+0x10/0x10 [ 775.146125] ? find_held_lock+0x2b/0x80 [ 775.146153] ? ksys_write+0x121/0x240 [ 775.146182] ? lock_is_held_type+0x9e/0x120 [ 775.146224] __do_sys_clone3+0x1f5/0x280 [ 775.146260] ? __pfx___do_sys_clone3+0x10/0x10 [ 775.146310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.146360] ? perf_trace_preemptirq_template+0x259/0x430 [ 775.146413] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 775.146463] ? __pfx_ksys_write+0x10/0x10 [ 775.146524] do_syscall_64+0xbf/0x420 [ 775.146563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.146591] RIP: 0033:0x7fd4e7ae4b19 [ 775.146613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 775.146638] RSP: 002b:00007fd4e505a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 775.146663] RAX: ffffffffffffffda RBX: 00007fd4e7bf7f60 RCX: 00007fd4e7ae4b19 [ 775.146679] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 775.146694] RBP: 00007fd4e505a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 775.146709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.146724] R13: 00007ffcbacfba2f R14: 00007fd4e505a300 R15: 0000000000022000 [ 775.146792] 16:50:23 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) (fail_nth: 8) 16:50:23 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) 16:50:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 16:50:33 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:33 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) (fail_nth: 9) 16:50:33 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:33 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:50:33 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:33 executing program 2: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)=""/125, 0x7d}, {&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000200)=""/11, 0xb}, {&(0x7f0000000240)=""/39, 0x27}], 0x4, &(0x7f00000002c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}], 0x1, 0x2062, &(0x7f0000000340)={0x0, 0x989680}) r0 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r0, &(0x7f0000000000)=""/159, 0x9f, 0x200000) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f0000000380), 0x6e, &(0x7f0000000540)=[{&(0x7f0000000400)=""/219, 0xdb}, {&(0x7f0000000500)=""/58, 0x3a}], 0x2}}, {{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000680)=""/52, 0x34}, {&(0x7f00000006c0)=""/81, 0x51}, {&(0x7f0000000740)=""/10, 0xa}], 0x3, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000a00)=""/232, 0xe8}], 0x1}}], 0x3, 0x40, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="08020008221100"/24], 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xb}, {}, @from_mac=@device_b, @device_a, @device_b}, {0xb}}, {@type11={{}, {}, @broadcast, @device_b, @random="a20cc76d51e3", {}, @broadcast}}}}, @a_msdu}, 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=ANY=[@ANYBLOB="d0840000260b01ba5647b4bc110000d250505050507c2f21b600dfad67258c"], 0x1f) r1 = syz_open_procfs(0x0, &(0x7f0000000980)='fdinfo/3\x00') pread64(r1, &(0x7f0000000000)=""/159, 0x9f, 0x200000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000bc0)={0x62, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @calipso={0x7, 0x18, {0x0, 0x4, 0x5, 0x7fff, [0x1, 0x4]}}, @calipso={0x7, 0x20, {0x1, 0x6, 0x5, 0x0, [0x309, 0x95b, 0x6]}}, @ra, @enc_lim={0x4, 0x1, 0x81}, @pad1]}, 0x58) 16:50:33 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) 16:50:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) [ 785.516686] FAULT_INJECTION: forcing a failure. [ 785.516686] name failslab, interval 1, probability 0, space 0, times 0 [ 785.517647] CPU: 0 UID: 0 PID: 27643 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 785.517664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 785.517672] Call Trace: [ 785.517678] [ 785.517684] dump_stack_lvl+0xfa/0x120 [ 785.517710] should_fail_ex+0x4d7/0x5e0 [ 785.517745] should_failslab+0xc2/0x120 [ 785.517764] __kmalloc_noprof+0xd6/0x880 [ 785.517790] ? __pfx_perf_event_init_task+0x10/0x10 [ 785.517809] ? audit_alloc+0xa3/0x780 [ 785.517822] ? security_task_alloc+0xf0/0x150 [ 785.517840] ? __pfx_audit_alloc+0x10/0x10 [ 785.517861] ? security_task_alloc+0xf0/0x150 [ 785.517876] ? copy_process+0x1d3d/0x74d0 [ 785.517893] security_task_alloc+0xf0/0x150 [ 785.517914] copy_process+0x1f0c/0x74d0 [ 785.517959] ? __pfx_copy_process+0x10/0x10 [ 785.517982] ? __might_fault+0xe0/0x190 [ 785.518007] ? _copy_from_user+0x5b/0xd0 [ 785.518042] kernel_clone+0xea/0x7c0 [ 785.518058] ? get_pid_task+0xfd/0x250 [ 785.518081] ? __pfx_kernel_clone+0x10/0x10 [ 785.518113] ? find_held_lock+0x2b/0x80 [ 785.518128] ? ksys_write+0x121/0x240 [ 785.518144] ? lock_is_held_type+0x9e/0x120 [ 785.518166] __do_sys_clone3+0x1f5/0x280 [ 785.518185] ? __pfx___do_sys_clone3+0x10/0x10 [ 785.518236] ? perf_trace_preemptirq_template+0x259/0x430 [ 785.518264] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 785.518290] ? __pfx_ksys_write+0x10/0x10 [ 785.518320] do_syscall_64+0xbf/0x420 [ 785.518341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.518356] RIP: 0033:0x7fd4e7ae4b19 [ 785.518369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 785.518382] RSP: 002b:00007fd4e505a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 785.518394] RAX: ffffffffffffffda RBX: 00007fd4e7bf7f60 RCX: 00007fd4e7ae4b19 [ 785.518407] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 785.518415] RBP: 00007fd4e505a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 785.518423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.518431] R13: 00007ffcbacfba2f R14: 00007fd4e505a300 R15: 0000000000022000 [ 785.518466] [ 785.563169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.571339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 785.574360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:50:33 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) (fail_nth: 10) 16:50:33 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:33 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:33 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) write(r0, &(0x7f0000000900)="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", 0x200) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) 16:50:33 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) (fail_nth: 11) 16:50:33 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 785.800105] FAULT_INJECTION: forcing a failure. [ 785.800105] name failslab, interval 1, probability 0, space 0, times 0 [ 785.804041] CPU: 0 UID: 0 PID: 27856 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 785.804059] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 785.804077] Call Trace: [ 785.804082] [ 785.804087] dump_stack_lvl+0xfa/0x120 [ 785.804112] should_fail_ex+0x4d7/0x5e0 [ 785.804145] ? copy_process+0x216c/0x74d0 [ 785.804163] should_failslab+0xc2/0x120 [ 785.804181] kmem_cache_alloc_noprof+0x80/0x760 [ 785.804201] ? copy_process+0x2135/0x74d0 [ 785.804229] ? copy_process+0x216c/0x74d0 [ 785.804243] copy_process+0x216c/0x74d0 [ 785.804284] ? __pfx_copy_process+0x10/0x10 [ 785.804303] ? __might_fault+0xe0/0x190 [ 785.804326] ? _copy_from_user+0x5b/0xd0 [ 785.804359] kernel_clone+0xea/0x7c0 [ 785.804374] ? get_pid_task+0xfd/0x250 [ 785.804395] ? __pfx_kernel_clone+0x10/0x10 [ 785.804425] ? find_held_lock+0x2b/0x80 [ 785.804440] ? ksys_write+0x121/0x240 [ 785.804455] ? lock_is_held_type+0x9e/0x120 [ 785.804476] __do_sys_clone3+0x1f5/0x280 [ 785.804493] ? __pfx___do_sys_clone3+0x10/0x10 [ 785.804541] ? perf_trace_preemptirq_template+0x259/0x430 [ 785.804568] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 785.804591] ? __pfx_ksys_write+0x10/0x10 [ 785.804620] do_syscall_64+0xbf/0x420 [ 785.804640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.804654] RIP: 0033:0x7fd4e7ae4b19 [ 785.804665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 785.804677] RSP: 002b:00007fd4e505a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 785.804690] RAX: ffffffffffffffda RBX: 00007fd4e7bf7f60 RCX: 00007fd4e7ae4b19 [ 785.804698] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 785.804705] RBP: 00007fd4e505a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 785.804713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 785.804720] R13: 00007ffcbacfba2f R14: 00007fd4e505a300 R15: 0000000000022000 [ 785.804752] 16:50:43 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:50:43 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) creat(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) 16:50:43 executing program 2: ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000080)=0x100) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="0802000008021500004f2350505050500802510009000000111b0338d117ade3980876a4271ffb8ea5b61226c54b2500010000e6eba9caa9dffc6d63d05fe2133c878842ed5d85642764ab325ffb1415a442fede80f85829638747391406a063233004913f8c0cd87282107adb03d88a308563a430ca6526711822ca12536c573248baa8b5046816f4e6fedce995cfebd1b5081e06741f01eebfd65b023b14a0d0a1ef514188ba011b3c0dcb4843d120b95d2e68989e5519d1569c6ae14851053bcb11020000000000000000000000000000e8ff00"], 0x18) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000240)={0xfff, 0x9, 0xd, &(0x7f0000000040)="72e66d399698a6260f8763dab8"}) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f0000000280)=ANY=[], 0x3e) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x224800, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000a00)={{0x0, 0x80, 0x8, 0xa70, 0xe6f, 0xadd, 0x4, 0x0, 0x6, 0x2, 0x1, 0x2, 0x1d7, 0x18}}) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}}, @ntf_ch_w}, 0x1f) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000100)) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f00000000c0)={0x1, 0x1, 0x1000}) syz_80211_inject_frame(&(0x7f0000000280)=@device_b, &(0x7f00000002c0)=@ctrl_frame=@ack={{}, {0x153}, @device_b}, 0xa) 16:50:43 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) (fail_nth: 12) 16:50:43 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:43 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:43 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:43 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 16:50:43 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) [ 795.587665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.603434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.629016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.646396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:50:43 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:50:43 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 16:50:43 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) (fail_nth: 13) 16:50:43 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) 16:50:43 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:50:43 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 795.807257] FAULT_INJECTION: forcing a failure. [ 795.807257] name failslab, interval 1, probability 0, space 0, times 0 [ 795.808219] CPU: 1 UID: 0 PID: 28397 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 795.808236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 795.808243] Call Trace: [ 795.808248] [ 795.808254] dump_stack_lvl+0xfa/0x120 [ 795.808277] should_fail_ex+0x4d7/0x5e0 [ 795.808309] ? copy_process+0x3360/0x74d0 [ 795.808326] should_failslab+0xc2/0x120 [ 795.808343] kmem_cache_alloc_noprof+0x80/0x760 [ 795.808363] ? copy_process+0x229d/0x74d0 [ 795.808391] ? copy_process+0x3360/0x74d0 [ 795.808405] copy_process+0x3360/0x74d0 [ 795.808446] ? __pfx_copy_process+0x10/0x10 [ 795.808464] ? __might_fault+0xe0/0x190 [ 795.808488] ? _copy_from_user+0x5b/0xd0 [ 795.808519] kernel_clone+0xea/0x7c0 [ 795.808535] ? get_pid_task+0xfd/0x250 [ 795.808554] ? __pfx_kernel_clone+0x10/0x10 [ 795.808583] ? find_held_lock+0x2b/0x80 [ 795.808597] ? ksys_write+0x121/0x240 [ 795.808612] ? lock_is_held_type+0x9e/0x120 [ 795.808633] __do_sys_clone3+0x1f5/0x280 [ 795.808650] ? __pfx___do_sys_clone3+0x10/0x10 [ 795.808697] ? perf_trace_preemptirq_template+0x259/0x430 [ 795.808723] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 795.808747] ? __pfx_ksys_write+0x10/0x10 [ 795.808776] do_syscall_64+0xbf/0x420 [ 795.808800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.808814] RIP: 0033:0x7fd4e7ae4b19 [ 795.808825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 795.808836] RSP: 002b:00007fd4e505a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 795.808848] RAX: ffffffffffffffda RBX: 00007fd4e7bf7f60 RCX: 00007fd4e7ae4b19 [ 795.808856] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 795.808863] RBP: 00007fd4e505a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 795.808871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 795.808877] R13: 00007ffcbacfba2f R14: 00007fd4e505a300 R15: 0000000000022000 [ 795.808909] 16:50:43 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) 16:50:43 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) 16:50:43 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 795.968654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:50:44 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 16:50:44 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) (fail_nth: 14) 16:50:44 executing program 7: clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) 16:50:44 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:44 executing program 2: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f0000000080)=ANY=[@ANYBLOB="b881000008021100000108021100000008957600000100ec0a0008830000ffffffffffff080211000001a20cc76d51e30000ffffffffffff800000000000a7c435d29fa1468a3d7da09a8be14c9637b08c04c197"], 0x3e) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}}, @ntf_ch_w}, 0x1f) 16:50:44 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 796.250871] [ 796.251194] ===================================== [ 796.251886] WARNING: bad unlock balance detected! [ 796.252574] 6.19.0-rc5-next-20260113 #1 Not tainted [ 796.253286] ------------------------------------- [ 796.253968] syz-executor.1/28830 is trying to release lock (rcu_read_lock) at: [ 796.255008] [] __wait_on_freeing_inode+0x105/0x350 [ 796.255938] but there are no more locks to release! [ 796.256663] [ 796.256663] other info that might help us debug this: [ 796.257585] 4 locks held by syz-executor.1/28830: [ 796.258273] #0: ffff88800f8003f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 796.259561] #1: ffff888049703d10 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 796.261019] #2: ffff88800f804950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 796.263159] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 796.265199] [ 796.265199] stack backtrace: [ 796.266121] CPU: 0 UID: 0 PID: 28830 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 796.266148] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 796.266160] Call Trace: [ 796.266167] [ 796.266175] dump_stack_lvl+0xca/0x120 [ 796.266200] ? __wait_on_freeing_inode+0x105/0x350 [ 796.266227] print_unlock_imbalance_bug+0x118/0x130 [ 796.266253] ? __wait_on_freeing_inode+0x105/0x350 [ 796.266280] lock_release+0x1ee/0x270 [ 796.266309] __wait_on_freeing_inode+0x10a/0x350 [ 796.266336] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 796.266367] ? __pfx_var_wake_function+0x10/0x10 [ 796.266400] ? lock_is_held_type+0x9e/0x120 [ 796.266422] insert_inode_locked+0x25f/0x890 [ 796.266456] __ext4_new_inode+0x223d/0x4cd0 [ 796.266490] ? __pfx___ext4_new_inode+0x10/0x10 [ 796.266518] ? __pfx___dquot_initialize+0x10/0x10 [ 796.266551] ? __pfx_avc_has_perm+0x10/0x10 [ 796.266581] ext4_symlink+0x406/0xb40 [ 796.266619] ? __pfx_ext4_symlink+0x10/0x10 [ 796.266649] ? security_inode_permission+0x72/0xe0 [ 796.266674] vfs_symlink+0x44b/0x840 [ 796.266707] do_symlinkat+0x153/0x440 [ 796.266734] ? __pfx_do_symlinkat+0x10/0x10 [ 796.266759] ? strncpy_from_user+0x21b/0x2f0 [ 796.266793] __x64_sys_symlink+0x79/0xa0 [ 796.266819] do_syscall_64+0xbf/0x420 [ 796.266843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.266865] RIP: 0033:0x7fd4e7ae4427 [ 796.266881] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 796.266901] RSP: 002b:00007ffcbacfbc78 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 796.266920] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd4e7ae4427 [ 796.266933] RDX: ffffffffffffffbc RSI: 00007fd4e7b3f00e RDI: 00007fd4e7b3e1dd [ 796.266947] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffcbacfb6f0 [ 796.266959] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 796.266971] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffcbacfbd40 [ 796.266993] [ 796.299320] ------------[ cut here ]------------ [ 796.300080] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.1/28830 [ 796.301719] Modules linked in: [ 796.302281] CPU: 0 UID: 0 PID: 28830 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 796.303944] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 796.305225] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 796.306140] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 a6 bb de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 89 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 61 f9 73 03 e8 0c 88 56 00 e9 [ 796.308862] RSP: 0018:ffff88804e5979a0 EFLAGS: 00010286 [ 796.309637] RAX: 00000000ffffffff RBX: ffff88804bb7b700 RCX: ffffffff815664c7 [ 796.310734] RDX: 0000000000000000 RSI: ffffffff815664d0 RDI: ffff88804bb7bafc [ 796.311896] RBP: ffff88804bb7b700 R08: 0000000000000000 R09: fffffbfff0ba6ff4 [ 796.313004] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804bb7b700 [ 796.314101] R13: 0000000000000001 R14: ffffffff85c0d880 R15: ffff888049559fb0 [ 796.315212] FS: 0000555583851400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 796.316458] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 796.317373] CR2: 00007fc42df8a004 CR3: 0000000039bff000 CR4: 0000000000350ef0 [ 796.318481] Call Trace: [ 796.318992] [ 796.320217] __wait_on_freeing_inode+0x10f/0x350 [ 796.321480] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 796.323462] ? __pfx_var_wake_function+0x10/0x10 [ 796.325708] ? lock_is_held_type+0x9e/0x120 [ 796.327704] insert_inode_locked+0x25f/0x890 [ 796.330683] __ext4_new_inode+0x223d/0x4cd0 [ 796.339032] ? __pfx___ext4_new_inode+0x10/0x10 [ 796.341290] ? __pfx___dquot_initialize+0x10/0x10 [ 796.342716] ? __pfx_avc_has_perm+0x10/0x10 [ 796.346001] ext4_symlink+0x406/0xb40 [ 796.350062] ? __pfx_ext4_symlink+0x10/0x10 [ 796.351919] ? security_inode_permission+0x72/0xe0 [ 796.354910] vfs_symlink+0x44b/0x840 [ 796.357233] do_symlinkat+0x153/0x440 [ 796.359229] ? __pfx_do_symlinkat+0x10/0x10 [ 796.360538] ? strncpy_from_user+0x21b/0x2f0 [ 796.363985] __x64_sys_symlink+0x79/0xa0 [ 796.365334] do_syscall_64+0xbf/0x420 [ 796.366777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.367954] RIP: 0033:0x7fd4e7ae4427 [ 796.368621] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 796.371309] RSP: 002b:00007ffcbacfbc78 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 796.372498] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd4e7ae4427 [ 796.373622] RDX: ffffffffffffffbc RSI: 00007fd4e7b3f00e RDI: 00007fd4e7b3e1dd [ 796.374729] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffcbacfb6f0 [ 796.375890] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 796.377000] R13: 0000000000000001 R14: 0000000000000001 R15: 00007ffcbacfbd40 [ 796.381681] [ 796.382116] irq event stamp: 1163 [ 796.382619] hardirqs last enabled at (1163): [] irqentry_exit+0x17b/0x650 [ 796.384028] hardirqs last disabled at (1161): [] handle_softirqs+0x65e/0x7d0 [ 796.385477] softirqs last enabled at (1162): [] __irq_exit_rcu+0xc4/0x100 [ 796.386877] softirqs last disabled at (1153): [] __irq_exit_rcu+0xc4/0x100 [ 796.388274] ---[ end trace 0000000000000000 ]--- [ 796.403034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 798.149948] Bluetooth: hci1: command 0x0406 tx timeout 16:50:53 executing program 2: syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@no_qos=@type01={{}, {}, @device_b}}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), &(0x7f00000005c0)=@data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xb, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x52}, @initial, @device_a, @broadcast, {0x9, 0x1f}}, {0x4, 0x0, 0x2, 0x0, 0x7}}, {@type01={{0x0, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x20}, @broadcast, @random="f178b7aeca4b", @initial, {0x4}}, {0x1, 0x1, 0x0, 0x1, 0x6}}}, @a_msdu}, 0x34) syz_80211_inject_frame(&(0x7f0000000980)=@device_b, &(0x7f00000009c0)=@mgmt_frame=@action={@with_ht={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x6}}}, @ntf_ch_w}, 0x1f) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000a00)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_a, @device_b, @from_mac=@device_b, {0x6, 0xff8}}, @random="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"}, 0x86a) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=@ctrl_frame=@cf_end={{}, {0x1}, @device_b, @random="e485c4f34f3a"}, 0x10) 16:50:53 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:53 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:50:53 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:53 executing program 7: clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) 16:50:53 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) (fail_nth: 15) 16:50:53 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) 16:50:53 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) [ 806.056417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 16:50:53 executing program 7: clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) [ 806.074941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.085981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.093182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.097919] FAULT_INJECTION: forcing a failure. [ 806.097919] name failslab, interval 1, probability 0, space 0, times 0 16:50:54 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) [ 806.106413] CPU: 1 UID: 0 PID: 29084 Comm: syz-executor.1 Tainted: G W 6.19.0-rc5-next-20260113 #1 PREEMPT(lazy) [ 806.106456] Tainted: [W]=WARN [ 806.106465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 806.106480] Call Trace: [ 806.106489] [ 806.106499] dump_stack_lvl+0xfa/0x120 [ 806.106540] should_fail_ex+0x4d7/0x5e0 [ 806.106600] ? create_new_namespaces+0x30/0xc00 [ 806.106646] should_failslab+0xc2/0x120 [ 806.106680] kmem_cache_alloc_noprof+0x80/0x760 [ 806.106725] ? lock_release+0x1c7/0x270 [ 806.106779] ? create_new_namespaces+0x30/0xc00 [ 806.106833] create_new_namespaces+0x30/0xc00 [ 806.106882] ? security_capable+0x2f/0x90 [ 806.106941] copy_namespaces+0x45c/0x580 [ 806.106977] copy_process+0x2536/0x74d0 [ 806.107010] ? perf_trace_run_bpf_submit+0xef/0x180 [ 806.107084] ? __pfx_copy_process+0x10/0x10 [ 806.107122] ? __might_fault+0xe0/0x190 [ 806.107166] ? _copy_from_user+0x5b/0xd0 [ 806.107229] kernel_clone+0xea/0x7c0 [ 806.107273] ? __pfx_kernel_clone+0x10/0x10 [ 806.107331] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 806.107378] ? lock_release+0x1c7/0x270 [ 806.107425] __do_sys_clone3+0x1f5/0x280 [ 806.107462] ? __pfx___do_sys_clone3+0x10/0x10 [ 806.107552] ? perf_trace_preemptirq_template+0x259/0x430 [ 806.107604] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 806.107653] ? __pfx_ksys_write+0x10/0x10 [ 806.107710] do_syscall_64+0xbf/0x420 [ 806.107748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.107777] RIP: 0033:0x7fd4e7ae4b19 [ 806.107799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 806.107824] RSP: 002b:00007fd4e505a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 16:50:54 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) [ 806.107849] RAX: ffffffffffffffda RBX: 00007fd4e7bf7f60 RCX: 00007fd4e7ae4b19 [ 806.107866] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020000500 [ 806.107882] RBP: 00007fd4e505a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 806.107897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 806.107913] R13: 00007ffcbacfba2f R14: 00007fd4e505a300 R15: 0000000000022000 [ 806.107972] 16:50:54 executing program 6: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:54 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) r4 = getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) sched_getaffinity(r4, 0x8, &(0x7f0000000300)) r5 = fork() r6 = fork() kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600)=0xffffffffffffffff, 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) pidfd_send_signal(r7, 0x0, 0x0, 0x4) 16:50:54 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f0000000180)=""/224, 0xe0, 0x0, 0x0}, 0x58) 16:50:54 executing program 4: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r3 = timerfd_create(0xa, 0x0) close_range(r3, r0, 0x0) pread64(r2, &(0x7f0000001200)=""/135, 0x87, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x11890, 0x1f, 0x2006, 0x9, 0x6, 0x3ff, 0x9, 0x0, 0x6, 0x0, 0x1}, r1, 0x8, r2, 0x4) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r2, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) 16:50:54 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp6\x00') r2 = timerfd_create(0xa, 0x0) close_range(r2, r0, 0x0) getpgrp(0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x20040800) fork() clone3(&(0x7f0000000500)={0xa2807700, &(0x7f0000001600), 0x0, 0x0, {}, &(0x7f00000012c0)=""/228, 0xe4, 0x0, 0x0}, 0x58) VM DIAGNOSIS: 16:50:44 Registers: info registers vcpu 0 RAX=0000000000000045 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82977f45 RDI=ffffffff889c1a00 RBP=ffffffff889c19c0 RSP=ffff88806ce08938 R8 =0000000000000000 R9 =ffffed10016e1046 R10=0000000000000045 R11=6572617764726148 R12=0000000000000045 R13=0000000000000010 R14=ffffffff889c19c0 R15=ffffffff82977f30 RIP=ffffffff82977f9d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555583851400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc42df8a004 CR3=0000000039bff000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1527e RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88800f5e7b50 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11001ebcf6b R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88800f5e7b88 RIP=ffffffff84d15410 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555586d36400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d222000 CR3=000000000ef1d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000002f002f2e2e2f002e2e XMM01=0000000000000000696c61766e49002f XMM02=ffffffffffffff0f0e0d0c0b0a090807 XMM03=696e656420737365636341002f737973 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00005562dd61a8f000005562dd625900 XMM06=00005562dd62bd000000000200000003 XMM07=00000000000000000000000000000000 XMM08=2f63697361622f6372732f2e2e000d0a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000