0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:19:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:19:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e"], 0x6c}}, 0x0) [ 1218.085559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.093550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.098241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:19:59 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000070000000c00060000000000000000000800010002000000"], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0x9) setresuid(r3, 0xee01, 0x0) sendmsg$netlink(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)={0x10}, 0x10}], 0x1, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3}}}], 0x20}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00'}]}]}, 0x44}}, 0x4000014) syz_io_uring_complete(0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) [ 1218.146082] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1218.152104] loop3: detected capacity change from 0 to 140 [ 1218.181203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.188596] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended 12:19:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e"], 0x6c}}, 0x0) [ 1218.209116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1218.219352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:19:59 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000070000000c00060000000000000000000800010002000000"], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0x9) setresuid(r3, 0xee01, 0x0) sendmsg$netlink(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)={0x10}, 0x10}], 0x1, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3}}}], 0x20}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr=' \x01\x00'}]}]}, 0x44}}, 0x4000014) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) 12:19:59 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, 0x0, 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:19:59 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000070000000c00060000000000000000000800010002000000"], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0x9) setresuid(r3, 0xee01, 0x0) sendmsg$netlink(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)={0x10}, 0x10}], 0x1, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3}}}], 0x20}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) 12:19:59 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000070000000c00060000000000000000000800010002000000"], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0x9) setresuid(r3, 0xee01, 0x0) sendmsg$netlink(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)={0x10}, 0x10}], 0x1, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3}}}], 0x20}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) 12:19:59 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1218.322667] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:20:00 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000070000000c00060000000000000000000800010002000000"], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0x9) setresuid(r3, 0xee01, 0x0) sendmsg$netlink(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)={0x10}, 0x10}], 0x1, &(0x7f00000005c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3}}}], 0x20}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) 12:20:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x36) r3 = signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) 12:20:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e"], 0x6c}}, 0x0) 12:20:00 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000070000000c00060000000000000000000800010002000000"], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0x9) setresuid(r3, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) [ 1218.473040] Bluetooth: hci3: ACL packet for unknown connection handle 201 12:20:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:20:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x10, 0x2a, [@random={0xdd, 0xa, 'abcdefghij'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:20:00 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000070000000c00060000000000000000000800010002000000"], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0x9) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) [ 1218.586670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.620546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.627416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1218.652189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1220.008864] Bluetooth: hci2: command 0x0406 tx timeout 12:20:09 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:20:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) r3 = signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) 12:20:09 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x5, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:20:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:20:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x10, 0x2a, [@random={0xdd, 0xa, 'abcdefghij'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:20:09 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e"], 0x6c}}, 0x0) 12:20:09 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000070000000c00060000000000000000000800010002000000"], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0x9) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) 12:20:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce5343102"], 0x36) r3 = signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) [ 1227.875603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:20:09 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000070000000c00060000000000000000000800010002000000"], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0x9) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="8000000014d8468bf7eec26e0e7e6bd8ab94cfa4e1e539ce6e9f36c9f18e922a0968909590aa493e9af07fcff3a48f5bdb4f0da58b3eb63ea3f6e161fe0b6941bbd0034fdc9940f53d87dbc618e4c17ce9b5fc3ee854f4fe48376db83f279fc30e33e96c034688617e761f2678a6efafa3c66f742b7332224075bffaf600270bc2be54a65f4f2ae4674b3b6bee882cdcea2f583fd4da7422d0127e8b85fdd50181ed580d432c3fbbd932740b8a8f4d84360038ff7b022fe56f62914a82513ab1fdc2bd4d17ea0580592aa9adbe15d0173c851b49207e2c95f9db8b07f032378d2bea17294cfb693bb1d4c403000000000000004689b90cbcb95e19b546b8a6b1a6fadd1b3bfb8e7385e17c4c120fdd6328071fece5c74e94a8cfc10911a697490a29cd83979b05f8908fa1adff4c5709e149764a3bd0aa78ec500cde76b16c14c888ad37564828647c0c6a", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) [ 1227.905314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1227.925025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1227.930764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1227.936349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1227.949901] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1227.958300] loop3: detected capacity change from 0 to 140 12:20:09 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000070000000c00060000000000000000000800010002000000"], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) 12:20:09 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) [ 1227.981274] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1227.997374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1228.062312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:20:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) r3 = signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) 12:20:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x10, 0x2a, [@random={0xdd, 0xa, 'abcdefghij'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:20:17 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:20:17 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000070000000c00060000000000000000000800010002000000"], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) 12:20:17 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x5, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:20:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:20:18 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce5343102"], 0x36) r3 = signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) 12:20:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e"], 0x6c}}, 0x0) [ 1236.365412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1236.367344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:20:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e"], 0x6c}}, 0x0) [ 1236.384102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1236.390803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1236.394905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:20:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='%\x00\x00\x00\x00\x00\x00\x00\x00\x00.'], 0x6c}}, 0x0) [ 1236.433335] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1236.438875] loop3: detected capacity change from 0 to 140 12:20:18 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000070000000c00060000000000000000000800010002000000"], 0x28}}, 0x0) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) [ 1236.457131] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1236.477451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:20:18 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='.\x00\x00\x00\x00\x00\x00\x00\x00\x00.'], 0x6c}}, 0x0) [ 1236.566755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1240.488050] Bluetooth: hci1: command 0x0406 tx timeout 12:20:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) r3 = signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) 12:20:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:20:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB='t\x00\x00\x00\x00\x00\x00\x00\x00\x00.'], 0x6c}}, 0x0) 12:20:26 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x5, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:20:26 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:20:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce5343102"], 0x36) r3 = signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) 12:20:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:20:26 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000070000000c00060000000000000000000800010002000000"], 0x28}}, 0x0) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) [ 1245.073113] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1245.073646] loop3: detected capacity change from 0 to 140 [ 1245.077344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.090466] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1245.103025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1245.115879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:20:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050200000000000000002e"], 0x6c}}, 0x0) [ 1245.129072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:20:26 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000070000000c00060000000000000000000800010002000000"], 0x28}}, 0x0) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) 12:20:26 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {0xffffffffffffffff, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1245.187072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.190783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:20:26 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:20:26 executing program 2: syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) [ 1245.354208] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1245.354982] loop3: detected capacity change from 0 to 140 12:20:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050300000000000000002e"], 0x6c}}, 0x0) [ 1245.376764] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1245.386083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:20:27 executing program 2: syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) 12:20:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) [ 1245.566364] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.602503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1247.862114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1247.865619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1247.867406] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1247.872265] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1247.876013] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1249.895851] Bluetooth: hci2: command tx timeout [ 1251.943896] Bluetooth: hci2: command tx timeout [ 1253.991809] Bluetooth: hci2: command tx timeout [ 1256.039918] Bluetooth: hci2: command tx timeout [ 1263.780168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1263.781738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.843600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1263.844959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1264.139855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:20:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x36) r3 = signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) 12:20:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) 12:20:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:20:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:20:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:20:55 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:20:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050400000000000000002e"], 0x6c}}, 0x0) 12:20:55 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {0xffffffffffffffff, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:20:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) [ 1273.800373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:20:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) [ 1273.853187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1273.868578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1273.870180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1273.888317] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1273.892080] loop3: detected capacity change from 0 to 140 12:20:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050800000000000000002e"], 0x6c}}, 0x0) [ 1273.913693] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1273.922582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:20:55 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="8000000014d8468bf7eec26e0e7e6bd8ab94cfa4e1e539ce6e9f36c9f18e922a0968909590aa493e9af07fcff3a48f5bdb4f0da58b3eb63ea3f6e161fe0b6941bbd0034fdc9940f53d87dbc618e4c17ce9b5fc3ee854f4fe48376db83f279fc30e33e96c034688617e761f2678a6efafa3c66f742b7332224075bffaf600270bc2be54a65f4f2ae4674b3b6bee882cdcea2f583fd4da7422d0127e8b85fdd50181ed580d432c3fbbd932740b8a8f4d84360038ff7b022fe56f62914a82513ab1fdc2bd4d17ea0580592aa9adbe15d0173c851b49207e2c95f9db8b07f032378d2bea17294cfb693bb1d4c403000000000000004689b90cbcb95e19b546b8a6b1a6fadd1b3bfb8e7385e17c4c120fdd6328071fece5c74e94a8cfc10911a697490a29cd83979b05f8908fa1adff4c5709e149764a3bd0aa78ec500cde76b16c14c888ad37564828647c0c6a", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) 12:20:55 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:20:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, 0x0, 0x4c840) 12:20:55 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {0xffffffffffffffff, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1274.010998] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:20:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050f00000000000000002e"], 0x6c}}, 0x0) [ 1274.113673] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1274.115445] loop3: detected capacity change from 0 to 140 [ 1274.124942] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1274.135259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:20:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, 0x0, 0x4c840) 12:20:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x36) r3 = signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) [ 1274.227300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.374327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1276.786493] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1276.790328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1276.792371] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1276.801475] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1276.804444] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1278.887903] Bluetooth: hci2: command tx timeout [ 1280.936876] Bluetooth: hci2: command tx timeout [ 1282.984217] Bluetooth: hci2: command tx timeout [ 1285.031848] Bluetooth: hci2: command tx timeout [ 1289.639838] Bluetooth: hci7: command 0x0406 tx timeout [ 1292.931998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.933108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1292.967194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.968272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1293.302524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:21:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x36) r3 = signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) 12:21:23 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:21:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:21:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05ef00000000000000002e"], 0x6c}}, 0x0) 12:21:23 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:21:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, 0x0, 0x4c840) 12:21:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:21:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) [ 1301.538061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1301.547213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1301.564679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1301.594057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1301.595912] loop3: detected capacity change from 0 to 140 [ 1301.597317] Bluetooth: hci3: ACL packet for unknown connection handle 201 12:21:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05f000000000000000002e"], 0x6c}}, 0x0) [ 1301.603239] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1301.606660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:21:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) 12:21:23 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1301.686643] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:21:23 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:21:23 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050003000000000000002e"], 0x6c}}, 0x0) 12:21:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) [ 1301.836048] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1301.842201] loop3: detected capacity change from 0 to 140 12:21:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) [ 1301.873358] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1301.892746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:21:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:21:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x36) r3 = signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) 12:21:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) [ 1301.963264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1301.999140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1302.024126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1302.027560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:21:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000f000000000000002e"], 0x6c}}, 0x0) 12:21:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:21:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x36) r3 = signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) 12:21:32 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:21:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:21:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) 12:21:32 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:21:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) [ 1310.660881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1310.665144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1310.671439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1310.674750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:21:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="8000000014d8468bf7eec26e0e7e6bd8ab94cfa4e1e539ce6e9f36c9f18e922a0968909590aa493e9af07fcff3a48f5bdb4f0da58b3eb63ea3f6e161fe0b6941bbd0034fdc9940f53d87dbc618e4c17ce9b5fc3ee854f4fe48376db83f279fc30e33e96c034688617e761f2678a6efafa3c66f742b7332224075bffaf600270bc2be54a65f4f2ae4674b3b6bee882cdcea2f583fd4da7422d0127e8b85fdd50181ed580d432c3fbbd932740b8a8f4d84360038ff7b022fe56f62914a82513ab1fdc2bd4d17ea0580592aa9adbe15d0173c851b49207e2c95f9db8b07f032378d2bea17294cfb693bb1d4c403000000000000004689b90cbcb95e19b546b8a6b1a6fadd1b3bfb8e7385e17c4c120fdd6328071fece5c74e94a8cfc10911a697490a29cd83979b05f8908fa1adff4c5709e149764a3bd0aa78ec500cde76b16c14c888ad37564828647c0c6a", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) [ 1310.730954] loop3: detected capacity change from 0 to 140 [ 1310.731476] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1310.737966] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1310.745331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:21:32 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500ef000000000000002e"], 0x6c}}, 0x0) 12:21:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) 12:21:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="080226bd7000fddbcf25420000000e0001006e657464657673696d0000000f0002006e6574e80d2892cf6a0060000d0087006c325f64726f707300000000f4ff820000000000080001008063690011000500303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) 12:21:32 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r0, 0x2}, {r2, 0x14}, {r3, 0xc194}, {r0, 0x4000}], 0x5, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1310.832118] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.914137] Bluetooth: hci3: ACL packet for unknown connection handle 201 12:21:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:21:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x36) r3 = signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) 12:21:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) 12:21:41 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:21:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500f0000000000000002e"], 0x6c}}, 0x0) 12:21:41 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r0, 0x2}, {r2, 0x14}, {r3, 0xc194}, {r0, 0x4000}], 0x5, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:21:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) 12:21:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) [ 1319.563449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1319.567957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1319.579609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1319.582293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:21:41 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:21:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) [ 1319.673395] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1319.674775] loop3: detected capacity change from 0 to 140 12:21:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) [ 1319.682886] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1319.688366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:21:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000030000000000002e"], 0x6c}}, 0x0) 12:21:41 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:21:41 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r0, 0x2}, {r2, 0x14}, {r3, 0xc194}, {r0, 0x4000}], 0x5, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1319.778220] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:21:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) 12:21:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) [ 1319.912760] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1319.925391] loop3: detected capacity change from 0 to 140 12:21:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:21:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050040030000000000002e"], 0x6c}}, 0x0) 12:21:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x36) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) 12:21:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:21:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) 12:21:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) [ 1319.959807] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1320.014360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:21:41 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) [ 1320.090052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:21:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) [ 1320.098638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1320.127467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1320.152414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:21:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={0x0, 0x80}}, 0x4c840) [ 1320.195662] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:21:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:21:50 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {0xffffffffffffffff, 0x8000}, {r0, 0x2}, {r2, 0x14}, {r3, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:21:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) 12:21:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000080000000000002e"], 0x6c}}, 0x0) 12:21:50 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:21:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee01, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={0x0, 0x80}}, 0x0) 12:21:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x36) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) 12:21:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) [ 1328.883181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1328.935532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1328.951125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1328.967970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:21:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) [ 1328.997849] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1329.003488] loop3: detected capacity change from 0 to 140 12:21:50 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050003400000000000002e"], 0x6c}}, 0x0) [ 1329.023661] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended 12:21:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) [ 1329.049578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1329.069377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1329.075109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:21:50 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) 12:21:50 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {0xffffffffffffffff, 0x8000}, {r0, 0x2}, {r2, 0x14}, {r3, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1329.161641] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1329.265626] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1329.270554] loop3: detected capacity change from 0 to 140 [ 1329.278087] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1329.286329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1329.345540] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:22:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x36) r3 = signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) 12:22:00 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:22:00 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r3, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {0xffffffffffffffff, 0x8000}, {r0, 0x2}, {r2, 0x14}, {r3, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:22:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x36) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) 12:22:00 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05fffff00000000000002e"], 0x6c}}, 0x0) 12:22:00 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) 12:22:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:22:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) [ 1339.193620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.196442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:22:00 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) [ 1339.257603] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1339.258209] loop3: detected capacity change from 0 to 140 [ 1339.279575] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1339.280912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.290385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.295652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:22:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) [ 1339.302077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:22:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) 12:22:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000100000000002e"], 0x6c}}, 0x0) 12:22:01 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1339.386998] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:22:01 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:22:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) 12:22:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) [ 1339.471777] Bluetooth: hci3: ACL packet for unknown connection handle 201 12:22:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x0, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:22:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000200000000002e"], 0x6c}}, 0x0) 12:22:01 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:22:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) 12:22:01 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:22:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x36) r3 = signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) 12:22:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x36) r3 = signalfd4(r0, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) [ 1339.698001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.727827] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1339.730487] loop3: detected capacity change from 0 to 140 [ 1339.741264] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1339.751334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1339.754556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.766937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.768285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1339.806558] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:22:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:22:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x36) r3 = signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) 12:22:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x0, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:22:17 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:22:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) 12:22:17 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000400000000002e"], 0x6c}}, 0x0) 12:22:17 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:22:17 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x36) r3 = signalfd4(r0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) [ 1355.683013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1355.691365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:22:17 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000f00000000002e"], 0x6c}}, 0x0) [ 1355.696986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1355.697223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1355.702586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:22:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) [ 1355.734476] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1355.742574] loop3: detected capacity change from 0 to 140 [ 1355.764339] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1355.784566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:22:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) 12:22:17 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05ffffff9e00000000002e"], 0x6c}}, 0x0) [ 1355.869926] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:22:17 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:22:17 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x5, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:22:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) [ 1356.004586] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1356.015565] loop3: detected capacity change from 0 to 140 12:22:17 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000ef00000000002e"], 0x6c}}, 0x0) [ 1356.046091] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1356.068441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1356.158658] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:22:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:22:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x36) r3 = signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) 12:22:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05fffffff000000000002e"], 0x6c}}, 0x0) 12:22:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) 12:22:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x36) signalfd4(r0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) 12:22:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x0, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:22:26 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:22:26 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x5, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1365.293753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1365.301030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1365.304957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:22:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) [ 1365.338343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1365.355590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1365.397402] Bluetooth: hci3: ACL packet for unknown connection handle 201 12:22:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) [ 1365.402642] loop3: detected capacity change from 0 to 140 12:22:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500f0ffff00000000002e"], 0x6c}}, 0x0) [ 1365.445398] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended 12:22:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) [ 1365.464353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:22:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="057fffffff00000000002e"], 0x6c}}, 0x0) 12:22:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="059effffff00000000002e"], 0x6c}}, 0x0) 12:22:27 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:22:27 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x5, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1365.551953] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1365.687055] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1365.688693] loop3: detected capacity change from 0 to 140 [ 1365.695361] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1365.699621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1365.728411] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:22:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) 12:22:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce5343102"], 0x36) r3 = signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) 12:22:37 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:22:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x0, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:22:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:22:37 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{0xffffffffffffffff, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:22:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x36) signalfd4(r0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x8) 12:22:37 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05f0ffffff00000000002e"], 0x6c}}, 0x0) [ 1375.436266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1375.449235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1375.454448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1375.459693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1375.461046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1375.485408] loop3: detected capacity change from 0 to 140 [ 1375.486038] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1375.496497] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1375.500625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1375.537528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:22:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) 12:22:45 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{0xffffffffffffffff, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:22:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000300002e"], 0x6c}}, 0x0) 12:22:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x2c}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:22:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x36) signalfd4(r0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x8) 12:22:45 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:22:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x36) signalfd4(r0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) 12:22:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x0, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:22:45 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000800002e"], 0x6c}}, 0x0) [ 1383.930794] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1383.936066] loop3: detected capacity change from 0 to 140 [ 1383.950000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1383.957091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1383.958081] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1383.967095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1383.981104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1383.988633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1383.999842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:22:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 12:22:45 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{0xffffffffffffffff, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1384.027731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1384.124607] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1384.126623] loop3: detected capacity change from 0 to 140 [ 1384.132131] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1384.135404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1384.183611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:22:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000034000002e"], 0x6c}}, 0x0) 12:22:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x0, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:22:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x2c}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:22:55 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:22:55 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:22:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 12:22:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x36) signalfd4(r0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x8) 12:22:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x36) signalfd4(r0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) [ 1393.459331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1393.484266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1393.487607] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1393.490182] loop3: detected capacity change from 0 to 140 [ 1393.495101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1393.500988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1393.503265] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1393.507949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1393.509943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:22:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) [ 1393.548352] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:22:55 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:22:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05fffffffffffff000002e"], 0x6c}}, 0x0) 12:22:55 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:22:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000001002e"], 0x6c}}, 0x0) 12:22:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) [ 1393.686450] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1393.688139] loop3: detected capacity change from 0 to 140 [ 1393.697240] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1393.703682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:22:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000002002e"], 0x6c}}, 0x0) [ 1393.779952] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1400.231858] Bluetooth: hci2: command 0x0406 tx timeout 12:23:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x36) signalfd4(r0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x8) 12:23:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 12:23:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x0, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:23:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00'], 0x36) signalfd4(r0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, 0x0, 0x0) 12:23:05 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:23:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000004002e"], 0x6c}}, 0x0) 12:23:05 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:23:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x2c}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) [ 1403.486269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1403.492597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:23:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000f002e"], 0x6c}}, 0x0) [ 1403.557160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1403.566113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1403.602901] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1403.612328] loop3: detected capacity change from 0 to 140 [ 1403.618532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:23:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) [ 1403.649931] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1403.686639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:23:05 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:23:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000ffffff9e002e"], 0x6c}}, 0x0) 12:23:05 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, 0x0, &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:23:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) [ 1403.810506] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:23:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x0, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) [ 1403.970434] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1403.979249] loop3: detected capacity change from 0 to 140 12:23:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x30}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) [ 1404.016287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1404.033277] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1404.038665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1404.055694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1404.110241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:23:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x10, 0x2a, [@random={0xdd, 0xa, 'abcdefghij'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:23:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) 12:23:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000ef002e"], 0x6c}}, 0x0) 12:23:05 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) [ 1404.157345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1404.167284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:23:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) 12:23:05 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, 0x0, &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1404.178913] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:23:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x36) r3 = signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) 12:23:05 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000fffffff0002e"], 0x6c}}, 0x0) [ 1404.254028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1404.304533] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1404.310640] loop3: detected capacity change from 0 to 140 12:23:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) [ 1404.337362] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1404.354120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1404.458039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:23:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) 12:23:15 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:23:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x0, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:23:15 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:23:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x30}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:23:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000007fffffff002e"], 0x6c}}, 0x0) 12:23:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:23:15 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, 0x0, &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1414.051461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1414.065664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1414.113455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1414.118253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1414.135271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1414.142328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:23:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) [ 1414.162879] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1414.164782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1414.168901] loop3: detected capacity change from 0 to 140 12:23:15 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500f0ffffffffffff002e"], 0x6c}}, 0x0) [ 1414.211991] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1414.241668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:23:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) 12:23:16 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), 0x0, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1414.348454] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1414.538423] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1414.541572] loop3: detected capacity change from 0 to 140 [ 1414.562197] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1414.569442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1414.649454] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:23:26 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:23:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050002000000000000002e"], 0x6c}}, 0x0) 12:23:26 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), 0x0, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:23:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:23:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:23:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x30}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:23:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:23:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) [ 1424.496277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1424.502629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1424.525110] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1424.525572] loop3: detected capacity change from 0 to 140 [ 1424.532632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1424.540126] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1424.544372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1424.556028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1424.562138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:23:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) [ 1424.567959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1424.585560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:23:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050003000000000000002e"], 0x6c}}, 0x0) [ 1424.622320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:23:26 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), 0x0, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:23:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) [ 1424.723188] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1424.723757] loop3: detected capacity change from 0 to 140 [ 1424.731484] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1424.742235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1424.781911] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:23:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050004000000000000002e"], 0x6c}}, 0x0) 12:23:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0x0, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) [ 1432.416618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:23:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:23:34 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, 0x0, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:23:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:23:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:23:34 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:23:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) 12:23:34 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) [ 1432.477212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:23:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050008000000000000002e"], 0x6c}}, 0x0) [ 1432.487265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1432.492154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1432.499675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1432.503329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1432.520131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1432.541783] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1432.547908] loop3: detected capacity change from 0 to 140 12:23:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) [ 1432.573515] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended 12:23:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000f000000000000002e"], 0x6c}}, 0x0) [ 1432.590158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:23:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500ef000000000000002e"], 0x6c}}, 0x0) 12:23:34 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, 0x0, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1432.727399] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:23:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 12:23:34 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:23:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0x0, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:23:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500f0000000000000002e"], 0x6c}}, 0x0) [ 1432.837567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:23:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:23:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:23:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) 12:23:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:23:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000030000000000002e"], 0x6c}}, 0x0) [ 1432.918971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1432.920165] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1432.928817] loop3: detected capacity change from 0 to 140 [ 1432.929877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1432.951787] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1432.976582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:23:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}}, 0x0) [ 1432.987528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1432.991407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1433.076949] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:23:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:23:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:23:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:23:42 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000f0000000000002e"], 0x6c}}, 0x0) 12:23:42 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:23:42 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, 0x0, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:23:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0x0, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:23:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) [ 1441.134916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1441.150896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1441.155035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1441.160046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1441.196561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:23:42 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000ef0000000000002e"], 0x6c}}, 0x0) 12:23:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x30}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) [ 1441.239048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1441.248567] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1441.256942] loop3: detected capacity change from 0 to 140 [ 1441.274987] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1441.287665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:23:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000f00000000000002e"], 0x6c}}, 0x0) 12:23:43 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1441.376633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:23:43 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) [ 1441.491290] Bluetooth: hci3: ACL packet for unknown connection handle 201 12:23:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000300000000002e"], 0x6c}}, 0x0) 12:23:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1441.496820] loop3: detected capacity change from 0 to 140 [ 1441.510651] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1441.517905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:23:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) [ 1441.631958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1441.639086] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1441.698863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1441.707410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:23:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:23:53 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:23:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:23:53 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:23:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:23:53 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000400300000000002e"], 0x6c}}, 0x0) 12:23:53 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:23:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) [ 1451.569449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.599538] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1451.599638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.603675] loop3: detected capacity change from 0 to 140 [ 1451.610490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.612376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.618008] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1451.627238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1451.640959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.686143] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:24:01 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:24:01 executing program 1: getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc}}}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x234, r2, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3ff}, @NL80211_ATTR_FILS_ERP_REALM={0xda, 0xfa, "0f5f0336ee2acb50dc5d496c2483ad9ce30737961087bac85a826e5e65c9a9b621860adcadf946a27f1e30e5c571c9f545d8f9c1563da281e2541ad6e2cc5f968bec84f38cb3dd153341489c4f8fe37e99c1893b7bc6951f78913631591d91e80949ad1d0057848c66a3c1cb60fb995d9f51659d84a79808d11489655bd65a9679c3b6980f85dd56ac44713f77936f4714214aebc0108c6f1008f5f8ab9c8235e0906acdf8942867dbf11ba6164d58613c97278eaa7793906c3ecc1018e3374e3332322a4ae618f06d0cc7f2542b401bd23ed2be8e68"}, @NL80211_ATTR_FILS_ERP_RRK={0x59, 0xfc, "e70bc1cdafe1b62d7fea2a33b68be990298801f5c8b1ce0a5c7c892e2610261f8627009469bb37b4bda6d254ae3912573c3e1f34837d5c6b60e97a4b40cc313a92d6c635ffcf278205b82f4a1e37767016f380dc67"}], @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x1, 0x6, 0x0, {0x8e9, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x8, 0x4, 0x1}}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac}, @NL80211_ATTR_KEYS={0xa8, 0x51, 0x0, 0x1, [{0x4}, {0x38, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_SEQ={0x10, 0x4, "b08ce49790942ae551661e6c"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_SEQ={0x5, 0x4, '`'}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "36f1e0de7f"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}]}, 0x234}}, 0x40084) 12:24:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000800000000002e"], 0x6c}}, 0x0) 12:24:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:24:01 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:24:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x36) 12:24:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:24:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) [ 1459.863481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.869229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.876614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1459.882039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:24:01 executing program 1: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff0000080001"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1459.925280] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1459.935142] loop3: detected capacity change from 0 to 140 12:24:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000034000000000002e"], 0x6c}}, 0x0) 12:24:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) [ 1459.960575] loop1: detected capacity change from 0 to 140 [ 1459.963041] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1459.965276] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1459.969642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1459.983350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1460.006680] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:24:01 executing program 1: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff0000080001"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:24:01 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1460.091924] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1460.096602] loop1: detected capacity change from 0 to 140 [ 1460.107591] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1460.116132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:24:01 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500fffff000000000002e"], 0x6c}}, 0x0) 12:24:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) [ 1460.173037] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:24:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) r3 = signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xca2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8) 12:24:01 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:24:01 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:24:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x36) 12:24:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) [ 1460.283637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1460.295962] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1460.299126] loop3: detected capacity change from 0 to 140 [ 1460.301414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1460.311659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1460.323946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1460.335454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1460.342164] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1460.363120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1460.428802] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:24:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000001000000002e"], 0x6c}}, 0x0) 12:24:11 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:24:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@random={0xdd, 0x6, 'abcdef'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:24:11 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:24:11 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:24:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:24:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x36) 12:24:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) [ 1470.148618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1470.159366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1470.163080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1470.172273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1470.187321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1470.196696] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1470.201862] loop3: detected capacity change from 0 to 140 [ 1470.209299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:24:11 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000002000000002e"], 0x6c}}, 0x0) 12:24:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) [ 1470.267891] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended 12:24:11 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) [ 1470.304209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:24:12 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1470.391943] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:24:12 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:24:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000004000000002e"], 0x6c}}, 0x0) [ 1470.562696] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1470.568153] loop3: detected capacity change from 0 to 140 [ 1470.599189] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1470.630547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1470.707769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:24:20 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:24:20 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:24:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:24:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[], 0x36) 12:24:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) 12:24:20 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:24:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000f000000002e"], 0x6c}}, 0x0) 12:24:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@random={0xdd, 0x6, 'abcdef'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) [ 1478.489419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1478.505272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1478.511487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1478.515469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1478.540132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:24:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) [ 1478.577663] Bluetooth: hci3: ACL packet for unknown connection handle 201 12:24:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500ffffff9e000000002e"], 0x6c}}, 0x0) [ 1478.587944] loop3: detected capacity change from 0 to 140 [ 1478.626903] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1478.652652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:24:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000ef000000002e"], 0x6c}}, 0x0) 12:24:20 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1478.762562] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:24:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) 12:24:20 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:24:20 executing program 6: syz_80211_inject_frame(0x0, &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:24:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) 12:24:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) 12:24:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[], 0x36) 12:24:20 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500fffffff0000000002e"], 0x6c}}, 0x0) 12:24:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@random={0xdd, 0x6, 'abcdef'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) [ 1478.981189] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1478.985832] loop3: detected capacity change from 0 to 140 [ 1479.023595] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1479.029233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1479.049913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:24:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) [ 1479.117692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1479.142229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1479.180547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1479.186650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1479.192577] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1479.231490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.780319] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1481.785288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1481.787255] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1481.790491] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1481.793278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1483.816059] Bluetooth: hci5: command tx timeout [ 1485.863826] Bluetooth: hci5: command tx timeout [ 1487.912883] Bluetooth: hci5: command tx timeout [ 1489.959798] Bluetooth: hci5: command tx timeout [ 1497.857085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1497.858507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1497.921612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1497.922931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1498.237651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1498.247087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:24:48 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:24:48 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:24:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) (fail_nth: 1) 12:24:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0xf, 0x2a, [@random={0xdd, 0x9, 'abcdefghi'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x3c}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:24:48 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) 12:24:48 executing program 6: syz_80211_inject_frame(0x0, &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:24:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[], 0x36) 12:24:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000f0ffff000000002e"], 0x6c}}, 0x0) [ 1507.292591] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1507.294897] loop3: detected capacity change from 0 to 140 [ 1507.313398] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1507.320725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1507.330337] FAULT_INJECTION: forcing a failure. [ 1507.330337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1507.332221] CPU: 0 UID: 0 PID: 36483 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1507.332250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1507.332264] Call Trace: [ 1507.332271] [ 1507.332279] dump_stack_lvl+0xfa/0x120 [ 1507.332321] should_fail_ex+0x4d7/0x5e0 [ 1507.332357] _copy_from_user+0x30/0xd0 [ 1507.332383] copy_msghdr_from_user+0x88/0x150 [ 1507.332413] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1507.332450] ? lock_acquire+0x15e/0x2f0 [ 1507.332478] ___sys_sendmsg+0xdc/0x1b0 [ 1507.332506] ? __pfx____sys_sendmsg+0x10/0x10 [ 1507.332539] ? proc_fail_nth_write+0x98/0x250 [ 1507.332574] ? lock_acquire+0x15e/0x2f0 [ 1507.332595] ? __fget_files+0x34/0x3b0 [ 1507.332626] ? find_held_lock+0x2b/0x80 [ 1507.332655] ? __fget_files+0x203/0x3b0 [ 1507.332685] ? lock_release+0xc8/0x290 [ 1507.332718] ? __fget_files+0x20d/0x3b0 [ 1507.332758] __sys_sendmsg+0x150/0x200 [ 1507.332785] ? __pfx___sys_sendmsg+0x10/0x10 [ 1507.332816] ? fput+0x92/0xd0 [ 1507.332838] ? ksys_write+0x1a3/0x240 [ 1507.332870] ? __pfx_ksys_write+0x10/0x10 [ 1507.332909] do_syscall_64+0xbf/0x360 [ 1507.332932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.332955] RIP: 0033:0x7fb90e9d1b19 [ 1507.332971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1507.332991] RSP: 002b:00007fb90bf47188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1507.333012] RAX: ffffffffffffffda RBX: 00007fb90eae4f60 RCX: 00007fb90e9d1b19 [ 1507.333026] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1507.333039] RBP: 00007fb90bf471d0 R08: 0000000000000000 R09: 0000000000000000 [ 1507.333052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1507.333064] R13: 00007fff5e389bbf R14: 00007fb90bf47300 R15: 0000000000022000 [ 1507.333094] [ 1507.341224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1507.359280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1507.364363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1507.370154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1507.387514] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:24:49 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={0x0}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:24:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) 12:24:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05007fffffff000000002e"], 0x6c}}, 0x0) 12:24:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) (fail_nth: 2) [ 1507.485052] FAULT_INJECTION: forcing a failure. [ 1507.485052] name failslab, interval 1, probability 0, space 0, times 1 [ 1507.486129] CPU: 1 UID: 0 PID: 36573 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1507.486146] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1507.486154] Call Trace: [ 1507.486158] [ 1507.486163] dump_stack_lvl+0xfa/0x120 [ 1507.486189] should_fail_ex+0x4d7/0x5e0 [ 1507.486210] should_failslab+0xc2/0x120 [ 1507.486222] kmem_cache_alloc_node_noprof+0x71/0x470 [ 1507.486244] ? __alloc_skb+0x2ab/0x370 [ 1507.486262] __alloc_skb+0x2ab/0x370 [ 1507.486277] ? __pfx___alloc_skb+0x10/0x10 [ 1507.486293] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1507.486316] netlink_alloc_large_skb+0x69/0x150 [ 1507.486333] netlink_sendmsg+0x676/0xd80 [ 1507.486356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1507.486379] ____sys_sendmsg+0xa67/0xc20 [ 1507.486402] ? copy_msghdr_from_user+0xfb/0x150 [ 1507.486417] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1507.486447] ? lock_acquire+0x15e/0x2f0 [ 1507.486462] ___sys_sendmsg+0x10f/0x1b0 [ 1507.486478] ? __pfx____sys_sendmsg+0x10/0x10 [ 1507.486497] ? proc_fail_nth_write+0x98/0x250 [ 1507.486518] ? lock_acquire+0x15e/0x2f0 [ 1507.486529] ? __fget_files+0x34/0x3b0 [ 1507.486549] ? find_held_lock+0x2b/0x80 12:24:49 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) [ 1507.486565] ? __fget_files+0x203/0x3b0 [ 1507.486581] ? lock_release+0xc8/0x290 [ 1507.486595] ? __fget_files+0x20d/0x3b0 [ 1507.486620] __sys_sendmsg+0x150/0x200 [ 1507.486636] ? __pfx___sys_sendmsg+0x10/0x10 [ 1507.486655] ? __pfx_ksys_write+0x10/0x10 [ 1507.486679] do_syscall_64+0xbf/0x360 [ 1507.486692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.486709] RIP: 0033:0x7fb90e9d1b19 [ 1507.486718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1507.486729] RSP: 002b:00007fb90bf47188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1507.486741] RAX: ffffffffffffffda RBX: 00007fb90eae4f60 RCX: 00007fb90e9d1b19 [ 1507.486749] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1507.486756] RBP: 00007fb90bf471d0 R08: 0000000000000000 R09: 0000000000000000 [ 1507.486763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1507.486770] R13: 00007fff5e389bbf R14: 00007fb90bf47300 R15: 0000000000022000 [ 1507.486785] 12:24:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05009effffff000000002e"], 0x6c}}, 0x0) [ 1507.545343] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1507.546167] loop3: detected capacity change from 0 to 140 12:24:49 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) [ 1507.585580] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended 12:24:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) (fail_nth: 3) [ 1507.607582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:24:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500f0ffffff000000002e"], 0x6c}}, 0x0) 12:24:49 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) [ 1507.674587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:24:49 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={0x0}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1507.779581] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1507.781584] loop3: detected capacity change from 0 to 140 [ 1507.786123] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1507.788940] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1507.818637] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:24:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000003002e"], 0x6c}}, 0x0) 12:24:58 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:24:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) (fail_nth: 4) 12:24:58 executing program 6: syz_80211_inject_frame(0x0, &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:24:58 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) 12:24:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0xf, 0x2a, [@random={0xdd, 0x9, 'abcdefghi'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x3c}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:24:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x36) 12:24:58 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={0x0}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1516.447020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:24:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) [ 1516.466986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1516.474307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1516.476820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:24:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) (fail_nth: 5) 12:24:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000008002e"], 0x6c}}, 0x0) [ 1516.508978] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1516.509535] loop3: detected capacity change from 0 to 140 [ 1516.516619] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1516.530395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:24:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) 12:24:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) (fail_nth: 6) [ 1516.574301] FAULT_INJECTION: forcing a failure. [ 1516.574301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1516.575383] CPU: 0 UID: 0 PID: 36836 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1516.575400] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1516.575408] Call Trace: [ 1516.575412] [ 1516.575418] dump_stack_lvl+0xfa/0x120 [ 1516.575444] should_fail_ex+0x4d7/0x5e0 [ 1516.575465] _copy_from_iter+0x1dc/0x15b0 [ 1516.575480] ? lock_acquire+0x15e/0x2f0 [ 1516.575493] ? __virt_addr_valid+0x1c6/0x5d0 [ 1516.575512] ? find_held_lock+0x2b/0x80 [ 1516.575530] ? __pfx__copy_from_iter+0x10/0x10 [ 1516.575542] ? lock_release+0xc8/0x290 [ 1516.575556] ? __virt_addr_valid+0x100/0x5d0 [ 1516.575573] ? __check_object_size+0x57b/0x880 [ 1516.575593] netlink_sendmsg+0x809/0xd80 [ 1516.575613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1516.575634] ____sys_sendmsg+0xa67/0xc20 [ 1516.575655] ? copy_msghdr_from_user+0xfb/0x150 [ 1516.575671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1516.575694] ? lock_acquire+0x15e/0x2f0 [ 1516.575712] ___sys_sendmsg+0x10f/0x1b0 [ 1516.575727] ? __pfx____sys_sendmsg+0x10/0x10 [ 1516.575745] ? proc_fail_nth_write+0x98/0x250 [ 1516.575768] ? lock_acquire+0x15e/0x2f0 [ 1516.575782] ? __fget_files+0x34/0x3b0 [ 1516.575799] ? find_held_lock+0x2b/0x80 [ 1516.575815] ? __fget_files+0x203/0x3b0 [ 1516.575831] ? lock_release+0xc8/0x290 [ 1516.575845] ? __fget_files+0x20d/0x3b0 [ 1516.575866] __sys_sendmsg+0x150/0x200 [ 1516.575880] ? __pfx___sys_sendmsg+0x10/0x10 [ 1516.575900] ? __pfx_ksys_write+0x10/0x10 [ 1516.575923] do_syscall_64+0xbf/0x360 [ 1516.575936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.575949] RIP: 0033:0x7fb90e9d1b19 [ 1516.575958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1516.575970] RSP: 002b:00007fb90bf47188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1516.575982] RAX: ffffffffffffffda RBX: 00007fb90eae4f60 RCX: 00007fb90e9d1b19 [ 1516.575990] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1516.575997] RBP: 00007fb90bf471d0 R08: 0000000000000000 R09: 0000000000000000 [ 1516.576004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1516.576012] R13: 00007fff5e389bbf R14: 00007fb90bf47300 R15: 0000000000022000 [ 1516.576027] 12:24:58 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000340002e"], 0x6c}}, 0x0) 12:24:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) (fail_nth: 7) 12:24:58 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1516.643483] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1516.650040] FAULT_INJECTION: forcing a failure. [ 1516.650040] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.650997] CPU: 0 UID: 0 PID: 36864 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) 12:24:58 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) [ 1516.651014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1516.651021] Call Trace: [ 1516.651026] [ 1516.651031] dump_stack_lvl+0xfa/0x120 [ 1516.651058] should_fail_ex+0x4d7/0x5e0 [ 1516.651079] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1516.651100] should_failslab+0xc2/0x120 [ 1516.651114] __kmalloc_noprof+0xb4/0x4b0 [ 1516.651135] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1516.651157] genl_family_rcv_msg_doit+0xab/0x2f0 [ 1516.651175] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1516.651196] ? cap_capable+0xdb/0x3b0 [ 1516.651216] ? security_capable+0x2f/0x90 [ 1516.651235] ? ns_capable+0xe2/0x120 [ 1516.651253] genl_rcv_msg+0x532/0x7e0 [ 1516.651271] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1516.651288] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1516.651307] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 1516.651319] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1516.651336] ? __lock_acquire+0x694/0x1b70 [ 1516.651351] netlink_rcv_skb+0x147/0x430 [ 1516.651367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1516.651385] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1516.651407] ? netlink_deliver_tap+0x1ae/0xce0 [ 1516.651421] ? is_vmalloc_addr+0x86/0xa0 [ 1516.651441] genl_rcv+0x28/0x40 [ 1516.651456] netlink_unicast+0x53d/0x7f0 [ 1516.651473] ? __pfx_netlink_unicast+0x10/0x10 [ 1516.651493] netlink_sendmsg+0x8ac/0xd80 [ 1516.651511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1516.651533] ____sys_sendmsg+0xa67/0xc20 [ 1516.651553] ? copy_msghdr_from_user+0xfb/0x150 [ 1516.651570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1516.651593] ? lock_acquire+0x15e/0x2f0 [ 1516.651607] ___sys_sendmsg+0x10f/0x1b0 [ 1516.651623] ? __pfx____sys_sendmsg+0x10/0x10 [ 1516.651641] ? proc_fail_nth_write+0x98/0x250 [ 1516.651661] ? lock_acquire+0x15e/0x2f0 12:24:58 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) [ 1516.651672] ? __fget_files+0x34/0x3b0 [ 1516.651690] ? find_held_lock+0x2b/0x80 [ 1516.651711] ? __fget_files+0x203/0x3b0 [ 1516.651727] ? lock_release+0xc8/0x290 [ 1516.651741] ? __fget_files+0x20d/0x3b0 [ 1516.651763] __sys_sendmsg+0x150/0x200 [ 1516.651778] ? __pfx___sys_sendmsg+0x10/0x10 [ 1516.651798] ? __pfx_ksys_write+0x10/0x10 [ 1516.651820] do_syscall_64+0xbf/0x360 [ 1516.651834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.651847] RIP: 0033:0x7fb90e9d1b19 [ 1516.651856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1516.651868] RSP: 002b:00007fb90bf47188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1516.651880] RAX: ffffffffffffffda RBX: 00007fb90eae4f60 RCX: 00007fb90e9d1b19 [ 1516.651888] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1516.651896] RBP: 00007fb90bf471d0 R08: 0000000000000000 R09: 0000000000000000 [ 1516.651905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1516.651912] R13: 00007fff5e389bbf R14: 00007fb90bf47300 R15: 0000000000022000 [ 1516.651931] 12:24:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) (fail_nth: 8) [ 1516.781357] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1516.781887] loop3: detected capacity change from 0 to 140 [ 1516.788497] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1516.799852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1516.844684] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:25:07 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:25:07 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:25:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) 12:25:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500fffffffffffff0002e"], 0x6c}}, 0x0) 12:25:07 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) 12:25:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x36) 12:25:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) (fail_nth: 9) 12:25:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0xf, 0x2a, [@random={0xdd, 0x9, 'abcdefghi'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x3c}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) [ 1525.880490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1525.897077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:25:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000012e"], 0x6c}}, 0x0) [ 1525.926161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1525.930680] FAULT_INJECTION: forcing a failure. [ 1525.930680] name failslab, interval 1, probability 0, space 0, times 0 12:25:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) [ 1525.932730] CPU: 0 UID: 0 PID: 36901 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1525.932762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1525.932777] Call Trace: [ 1525.932785] [ 1525.932795] dump_stack_lvl+0xfa/0x120 [ 1525.932840] should_fail_ex+0x4d7/0x5e0 [ 1525.932879] ? nl80211_trigger_scan+0x4c6/0x1ce0 [ 1525.932904] should_failslab+0xc2/0x120 [ 1525.932928] __kmalloc_noprof+0xb4/0x4b0 [ 1525.932964] ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10 [ 1525.933004] nl80211_trigger_scan+0x4c6/0x1ce0 [ 1525.933041] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1525.933079] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1525.933126] ? security_capable+0x2f/0x90 [ 1525.933161] ? ns_capable+0xe2/0x120 [ 1525.933194] genl_rcv_msg+0x532/0x7e0 [ 1525.933231] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1525.933265] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1525.933298] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 1525.933322] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1525.933353] ? __lock_acquire+0x694/0x1b70 [ 1525.933382] netlink_rcv_skb+0x147/0x430 [ 1525.933413] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1525.933450] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1525.933495] ? netlink_deliver_tap+0x1ae/0xce0 [ 1525.933523] ? is_vmalloc_addr+0x86/0xa0 [ 1525.933560] genl_rcv+0x28/0x40 [ 1525.933589] netlink_unicast+0x53d/0x7f0 [ 1525.933624] ? __pfx_netlink_unicast+0x10/0x10 [ 1525.933664] netlink_sendmsg+0x8ac/0xd80 [ 1525.933707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1525.933750] ____sys_sendmsg+0xa67/0xc20 [ 1525.933790] ? copy_msghdr_from_user+0xfb/0x150 [ 1525.933820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1525.933867] ? lock_acquire+0x15e/0x2f0 [ 1525.933894] ___sys_sendmsg+0x10f/0x1b0 [ 1525.933925] ? __pfx____sys_sendmsg+0x10/0x10 [ 1525.933961] ? proc_fail_nth_write+0x98/0x250 [ 1525.934015] ? lock_acquire+0x15e/0x2f0 [ 1525.934038] ? __fget_files+0x34/0x3b0 [ 1525.934071] ? find_held_lock+0x2b/0x80 [ 1525.934103] ? __fget_files+0x203/0x3b0 [ 1525.934135] ? lock_release+0xc8/0x290 [ 1525.934163] ? __fget_files+0x20d/0x3b0 [ 1525.934206] __sys_sendmsg+0x150/0x200 [ 1525.934236] ? __pfx___sys_sendmsg+0x10/0x10 [ 1525.934276] ? __pfx_ksys_write+0x10/0x10 [ 1525.934321] do_syscall_64+0xbf/0x360 [ 1525.934346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1525.934371] RIP: 0033:0x7fb90e9d1b19 [ 1525.934390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1525.934415] RSP: 002b:00007fb90bf47188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1525.934438] RAX: ffffffffffffffda RBX: 00007fb90eae4f60 RCX: 00007fb90e9d1b19 [ 1525.934454] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1525.934469] RBP: 00007fb90bf471d0 R08: 0000000000000000 R09: 0000000000000000 [ 1525.934483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1525.934497] R13: 00007fff5e389bbf R14: 00007fb90bf47300 R15: 0000000000022000 [ 1525.934529] [ 1525.983216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:25:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000022e"], 0x6c}}, 0x0) 12:25:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) [ 1526.059219] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1526.061795] loop3: detected capacity change from 0 to 140 12:25:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) 12:25:07 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000042e"], 0x6c}}, 0x0) [ 1526.082018] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1526.092595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:25:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) (fail_nth: 10) [ 1526.164242] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:25:07 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1526.270301] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1526.271688] loop3: detected capacity change from 0 to 140 [ 1526.288457] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1526.298299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1526.344888] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:25:16 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:25:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) 12:25:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000f2e"], 0x6c}}, 0x0) 12:25:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) (fail_nth: 11) 12:25:16 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) 12:25:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x36) 12:25:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x10, 0x2a, [@random={0xdd, 0xa, 'abcdefghij'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x3c}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:25:16 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1534.647165] FAULT_INJECTION: forcing a failure. [ 1534.647165] name failslab, interval 1, probability 0, space 0, times 0 [ 1534.648294] CPU: 1 UID: 0 PID: 37042 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1534.648311] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1534.648318] Call Trace: [ 1534.648322] [ 1534.648327] dump_stack_lvl+0xfa/0x120 [ 1534.648353] should_fail_ex+0x4d7/0x5e0 [ 1534.648374] should_failslab+0xc2/0x120 [ 1534.648386] kmem_cache_alloc_node_noprof+0x71/0x470 [ 1534.648404] ? __alloc_skb+0x2ab/0x370 [ 1534.648423] __alloc_skb+0x2ab/0x370 [ 1534.648437] ? __pfx___alloc_skb+0x10/0x10 [ 1534.648454] ? rdev_scan+0x159/0x300 [ 1534.648474] nl80211_send_scan_start+0x2d/0x190 [ 1534.648488] nl80211_trigger_scan+0x1092/0x1ce0 [ 1534.648507] genl_family_rcv_msg_doit+0x1fe/0x2f0 [ 1534.648526] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1534.648550] ? security_capable+0x2f/0x90 [ 1534.648567] ? ns_capable+0xe2/0x120 [ 1534.648585] genl_rcv_msg+0x532/0x7e0 [ 1534.648604] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1534.648621] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1534.648637] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 1534.648649] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1534.648665] ? __lock_acquire+0x694/0x1b70 [ 1534.648680] netlink_rcv_skb+0x147/0x430 [ 1534.648700] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1534.648717] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1534.648740] ? netlink_deliver_tap+0x1ae/0xce0 [ 1534.648753] ? is_vmalloc_addr+0x86/0xa0 [ 1534.648773] genl_rcv+0x28/0x40 [ 1534.648787] netlink_unicast+0x53d/0x7f0 [ 1534.648805] ? __pfx_netlink_unicast+0x10/0x10 [ 1534.648825] netlink_sendmsg+0x8ac/0xd80 [ 1534.648843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1534.648865] ____sys_sendmsg+0xa67/0xc20 [ 1534.648884] ? copy_msghdr_from_user+0xfb/0x150 [ 1534.648900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1534.648924] ? lock_acquire+0x15e/0x2f0 [ 1534.648938] ___sys_sendmsg+0x10f/0x1b0 [ 1534.648953] ? __pfx____sys_sendmsg+0x10/0x10 [ 1534.648971] ? proc_fail_nth_write+0x98/0x250 [ 1534.648991] ? lock_acquire+0x15e/0x2f0 [ 1534.649003] ? __fget_files+0x34/0x3b0 [ 1534.649020] ? find_held_lock+0x2b/0x80 [ 1534.649036] ? __fget_files+0x203/0x3b0 [ 1534.649053] ? lock_release+0xc8/0x290 [ 1534.649067] ? __fget_files+0x20d/0x3b0 [ 1534.649088] __sys_sendmsg+0x150/0x200 [ 1534.649103] ? __pfx___sys_sendmsg+0x10/0x10 [ 1534.649123] ? __pfx_ksys_write+0x10/0x10 [ 1534.649146] do_syscall_64+0xbf/0x360 [ 1534.649159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.649172] RIP: 0033:0x7fb90e9d1b19 [ 1534.649181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1534.649193] RSP: 002b:00007fb90bf47188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1534.649205] RAX: ffffffffffffffda RBX: 00007fb90eae4f60 RCX: 00007fb90e9d1b19 [ 1534.649213] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1534.649220] RBP: 00007fb90bf471d0 R08: 0000000000000000 R09: 0000000000000000 [ 1534.649228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1534.649235] R13: 00007fff5e389bbf R14: 00007fb90bf47300 R15: 0000000000022000 [ 1534.649251] [ 1534.684454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1534.690397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:25:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) [ 1534.721907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1534.736222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1534.745301] loop3: detected capacity change from 0 to 140 [ 1534.747794] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1534.756350] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1534.767097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:25:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) (fail_nth: 12) 12:25:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000ffffff9e2e"], 0x6c}}, 0x0) 12:25:16 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1534.839320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:25:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) 12:25:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) (fail_nth: 13) 12:25:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000ef2e"], 0x6c}}, 0x0) [ 1534.901212] FAULT_INJECTION: forcing a failure. [ 1534.901212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1534.902353] CPU: 1 UID: 0 PID: 37168 Comm: syz-executor.1 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1534.902370] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1534.902377] Call Trace: [ 1534.902382] [ 1534.902386] dump_stack_lvl+0xfa/0x120 [ 1534.902412] should_fail_ex+0x4d7/0x5e0 [ 1534.902433] _copy_to_user+0x32/0xd0 [ 1534.902448] simple_read_from_buffer+0xe0/0x180 [ 1534.902467] proc_fail_nth_read+0x189/0x270 [ 1534.902485] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1534.902502] ? security_file_permission+0x22/0x90 [ 1534.902517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1534.902533] vfs_read+0x1eb/0xbe0 [ 1534.902553] ? __pfx_vfs_read+0x10/0x10 [ 1534.902571] ? lock_release+0xc8/0x290 [ 1534.902587] ? __fget_files+0x20d/0x3b0 [ 1534.902609] ksys_read+0x121/0x240 [ 1534.902626] ? __pfx_ksys_read+0x10/0x10 [ 1534.902647] do_syscall_64+0xbf/0x360 [ 1534.902660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.902673] RIP: 0033:0x7fb90e98469c [ 1534.902682] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1534.902694] RSP: 002b:00007fb90bf47170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1534.902710] RAX: ffffffffffffffda RBX: 0000000000000024 RCX: 00007fb90e98469c [ 1534.902718] RDX: 000000000000000f RSI: 00007fb90bf471e0 RDI: 0000000000000004 [ 1534.902725] RBP: 00007fb90bf471d0 R08: 0000000000000000 R09: 0000000000000000 [ 1534.902732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1534.902739] R13: 00007fff5e389bbf R14: 00007fb90bf47300 R15: 0000000000022000 [ 1534.902755] [ 1534.985627] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1534.988915] loop3: detected capacity change from 0 to 140 [ 1534.994313] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1534.997892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1535.049735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:25:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:25:25 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:25:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce5343102"], 0x36) 12:25:25 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) 12:25:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) 12:25:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x10, 0x2a, [@random={0xdd, 0xa, 'abcdefghij'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x3c}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:25:25 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:25:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000fffffff02e"], 0x6c}}, 0x0) [ 1543.858293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1543.876272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:25:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) [ 1543.891357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1543.905622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1543.946108] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1543.947458] loop3: detected capacity change from 0 to 140 [ 1543.955122] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1543.964383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:25:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:25:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000007fffffff2e"], 0x6c}}, 0x0) 12:25:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) 12:25:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000f0ffffffffffff2e"], 0x6c}}, 0x0) 12:25:25 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1544.139034] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1544.288545] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1544.290197] loop3: detected capacity change from 0 to 140 [ 1544.296625] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1544.305208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1544.340523] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:25:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) 12:25:34 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:25:34 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:25:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000001"], 0x6c}}, 0x0) 12:25:34 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:25:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x10, 0x2a, [@random={0xdd, 0xa, 'abcdefghij'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x3c}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:25:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce5343102"], 0x36) 12:25:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) [ 1552.574063] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1552.639479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1552.662116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1552.665659] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1552.667300] loop3: detected capacity change from 0 to 140 [ 1552.669092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1552.685496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1552.689206] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1552.698164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1552.726146] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:25:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000002"], 0x6c}}, 0x0) 12:25:43 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:25:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(0x0, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:25:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce5343102"], 0x36) 12:25:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:25:43 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:25:43 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:25:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) [ 1561.374574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:25:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) [ 1561.436694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1561.448470] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1561.452104] loop3: detected capacity change from 0 to 140 12:25:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) [ 1561.461589] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1561.473315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1561.490011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:25:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000005"], 0x6c}}, 0x0) 12:25:43 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x0, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1561.529404] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:25:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) [ 1561.539481] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1561.547341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:25:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x5, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:25:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 12:25:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000006"], 0x6c}}, 0x0) [ 1561.725466] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1561.732389] loop3: detected capacity change from 0 to 140 12:25:43 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:25:43 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000007"], 0x6c}}, 0x0) [ 1561.789079] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1561.808186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:25:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(0x0, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) [ 1561.974254] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1562.032541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1564.337556] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1564.340394] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1564.342329] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1564.352371] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1564.354644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1566.375802] Bluetooth: hci1: command tx timeout [ 1568.423824] Bluetooth: hci1: command tx timeout [ 1570.471806] Bluetooth: hci1: command tx timeout [ 1572.519796] Bluetooth: hci1: command tx timeout [ 1579.956688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1579.958488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.007458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.008950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.302656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1580.306520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:26:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 12:26:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000008"], 0x6c}}, 0x0) 12:26:12 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:26:12 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x0, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:26:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f1246797183"], 0x36) 12:26:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(0x0, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:26:12 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:26:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x6, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) [ 1591.116230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1591.140037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1591.145248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:26:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x7, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) [ 1591.199836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:26:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 12:26:12 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000009"], 0x6c}}, 0x0) [ 1591.244125] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1591.250908] loop3: detected capacity change from 0 to 140 [ 1591.263047] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1591.289183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1591.360140] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:26:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:26:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x8, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:26:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f1246797183"], 0x36) 12:26:22 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x0, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:26:22 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:26:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 12:26:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000a"], 0x6c}}, 0x0) 12:26:22 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x0, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1600.787444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1600.798689] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1600.803873] loop3: detected capacity change from 0 to 140 [ 1600.809062] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1600.814308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1600.832013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1600.841987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1600.845023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:26:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000b"], 0x6c}}, 0x0) 12:26:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x9, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:26:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) 12:26:22 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x160, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}]}, 0x160}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1600.913491] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:26:22 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:26:22 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000c"], 0x6c}}, 0x0) 12:26:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) [ 1601.031017] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1601.033211] loop3: detected capacity change from 0 to 140 [ 1601.037986] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1601.041508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:26:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) [ 1601.085533] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1605.034147] Bluetooth: hci5: command 0x0406 tx timeout 12:26:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f1246797183"], 0x36) 12:26:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xd, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:26:33 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x160, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}]}, 0x160}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:26:33 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:26:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:26:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) 12:26:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000e"], 0x6c}}, 0x0) 12:26:33 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x0, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:26:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f"], 0x6c}}, 0x0) [ 1611.587808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1611.617339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1611.650366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:26:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000010"], 0x6c}}, 0x0) [ 1611.668144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:26:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) 12:26:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xf, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) [ 1611.712025] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1611.718499] loop3: detected capacity change from 0 to 140 12:26:33 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) [ 1611.757996] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1611.762549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:26:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:26:33 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000011"], 0x6c}}, 0x0) 12:26:33 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) [ 1611.888248] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1611.943786] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.7'. 12:26:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xf0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:26:41 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x160, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}]}, 0x160}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:26:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a7"], 0x36) 12:26:41 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x0, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:26:41 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:26:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) 12:26:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:26:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000012"], 0x6c}}, 0x0) 12:26:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) [ 1619.876561] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1619.880083] loop3: detected capacity change from 0 to 140 [ 1619.882533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1619.908492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1619.916972] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1619.918413] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1619.943567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1619.946816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:26:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x300, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:26:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000013"], 0x6c}}, 0x0) 12:26:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) [ 1620.074659] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:26:41 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1a8, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x1a8}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:26:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x3e7, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:26:41 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000014"], 0x6c}}, 0x0) 12:26:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) 12:26:41 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) [ 1620.246596] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1620.249855] loop3: detected capacity change from 0 to 140 12:26:41 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x0, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1620.298182] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1620.326086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1620.373032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1620.496456] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:26:49 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:26:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x500, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:26:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000015"], 0x6c}}, 0x0) 12:26:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a7"], 0x36) 12:26:49 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1a8, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x1a8}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:26:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) 12:26:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:26:49 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x0, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1627.781319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1627.820285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:26:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x600, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) [ 1627.844153] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1627.848380] loop3: detected capacity change from 0 to 140 [ 1627.849200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:26:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000016"], 0x6c}}, 0x0) [ 1627.870087] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1627.884514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1627.890031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:26:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:26:49 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1a8, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x1a8}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1627.941220] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:26:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x700, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:26:49 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:26:49 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000017"], 0x6c}}, 0x0) [ 1628.057900] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1628.058456] loop3: detected capacity change from 0 to 140 [ 1628.066728] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1628.084228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:26:49 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:26:49 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x0, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:26:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:26:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 1) [ 1628.319340] FAULT_INJECTION: forcing a failure. [ 1628.319340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1628.320369] CPU: 0 UID: 0 PID: 39039 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1628.320387] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1628.320395] Call Trace: [ 1628.320399] [ 1628.320404] dump_stack_lvl+0xfa/0x120 [ 1628.320432] should_fail_ex+0x4d7/0x5e0 [ 1628.320454] _copy_from_user+0x30/0xd0 [ 1628.320469] copy_msghdr_from_user+0x88/0x150 [ 1628.320488] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1628.320509] ? lock_acquire+0x15e/0x2f0 [ 1628.320526] ___sys_sendmsg+0xdc/0x1b0 [ 1628.320543] ? __pfx____sys_sendmsg+0x10/0x10 [ 1628.320562] ? proc_fail_nth_write+0x98/0x250 [ 1628.320584] ? lock_acquire+0x15e/0x2f0 [ 1628.320596] ? __fget_files+0x34/0x3b0 [ 1628.320615] ? find_held_lock+0x2b/0x80 [ 1628.320634] ? __fget_files+0x203/0x3b0 [ 1628.320660] ? lock_release+0xc8/0x290 [ 1628.320678] ? __fget_files+0x20d/0x3b0 [ 1628.320705] __sys_sendmsg+0x150/0x200 [ 1628.320721] ? __pfx___sys_sendmsg+0x10/0x10 [ 1628.320739] ? fput+0x92/0xd0 [ 1628.320752] ? ksys_write+0x1a3/0x240 [ 1628.320770] ? __pfx_ksys_write+0x10/0x10 [ 1628.320794] do_syscall_64+0xbf/0x360 [ 1628.320807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.320820] RIP: 0033:0x7fce1d622b19 [ 1628.320831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1628.320844] RSP: 002b:00007fce1ab98188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1628.320857] RAX: ffffffffffffffda RBX: 00007fce1d735f60 RCX: 00007fce1d622b19 [ 1628.320865] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1628.320873] RBP: 00007fce1ab981d0 R08: 0000000000000000 R09: 0000000000000000 [ 1628.320881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1628.320889] R13: 00007ffcd80919ff R14: 00007fce1ab98300 R15: 0000000000022000 [ 1628.320905] [ 1628.332989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1628.350259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1628.380454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1630.644306] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1630.649570] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1630.653030] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1630.665046] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1630.668682] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1632.743868] Bluetooth: hci1: command tx timeout [ 1634.791815] Bluetooth: hci1: command tx timeout [ 1636.839817] Bluetooth: hci1: command tx timeout [ 1638.887873] Bluetooth: hci1: command tx timeout [ 1646.704881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1646.706382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1646.771985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1646.773570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1647.048178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1647.052398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:27:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a7"], 0x36) 12:27:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3665416756967e2"], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:27:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 2) 12:27:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x853, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:27:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000018"], 0x6c}}, 0x0) 12:27:16 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:27:16 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x0, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:27:16 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1bc, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}]}, 0x1bc}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1655.117974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1655.121915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:27:16 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000019"], 0x6c}}, 0x0) [ 1655.161358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1655.164278] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1655.165763] loop3: detected capacity change from 0 to 140 [ 1655.167978] FAULT_INJECTION: forcing a failure. [ 1655.167978] name failslab, interval 1, probability 0, space 0, times 0 [ 1655.168947] CPU: 1 UID: 0 PID: 39618 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1655.168963] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1655.168971] Call Trace: [ 1655.168976] [ 1655.168980] dump_stack_lvl+0xfa/0x120 [ 1655.169006] should_fail_ex+0x4d7/0x5e0 [ 1655.169027] should_failslab+0xc2/0x120 [ 1655.169040] kmem_cache_alloc_node_noprof+0x71/0x470 [ 1655.169058] ? __alloc_skb+0x2ab/0x370 [ 1655.169076] __alloc_skb+0x2ab/0x370 [ 1655.169091] ? __pfx___alloc_skb+0x10/0x10 [ 1655.169107] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1655.169128] netlink_alloc_large_skb+0x69/0x150 [ 1655.169144] netlink_sendmsg+0x676/0xd80 [ 1655.169162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1655.169183] ____sys_sendmsg+0xa67/0xc20 [ 1655.169202] ? copy_msghdr_from_user+0xfb/0x150 [ 1655.169218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1655.169241] ? lock_acquire+0x15e/0x2f0 [ 1655.169256] ___sys_sendmsg+0x10f/0x1b0 [ 1655.169272] ? __pfx____sys_sendmsg+0x10/0x10 [ 1655.169290] ? proc_fail_nth_write+0x98/0x250 [ 1655.169309] ? lock_acquire+0x15e/0x2f0 [ 1655.169321] ? __fget_files+0x34/0x3b0 [ 1655.169338] ? find_held_lock+0x2b/0x80 [ 1655.169355] ? __fget_files+0x203/0x3b0 [ 1655.169371] ? lock_release+0xc8/0x290 [ 1655.169385] ? __fget_files+0x20d/0x3b0 [ 1655.169406] __sys_sendmsg+0x150/0x200 [ 1655.169420] ? __pfx___sys_sendmsg+0x10/0x10 [ 1655.169440] ? __pfx_ksys_write+0x10/0x10 [ 1655.169464] do_syscall_64+0xbf/0x360 [ 1655.169477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.169490] RIP: 0033:0x7fce1d622b19 [ 1655.169499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1655.169510] RSP: 002b:00007fce1ab98188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1655.169522] RAX: ffffffffffffffda RBX: 00007fce1d735f60 RCX: 00007fce1d622b19 [ 1655.169530] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1655.169537] RBP: 00007fce1ab981d0 R08: 0000000000000000 R09: 0000000000000000 [ 1655.169544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1655.169551] R13: 00007ffcd80919ff R14: 00007fce1ab98300 R15: 0000000000022000 [ 1655.169567] [ 1655.173392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:27:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 3) [ 1655.207465] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1655.213043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1655.290643] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:27:26 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1bc, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}]}, 0x1bc}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:27:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadf"], 0x36) 12:27:26 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x0, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:27:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 4) 12:27:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000001a"], 0x6c}}, 0x0) 12:27:26 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:27:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:27:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x900, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) [ 1664.738462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1664.758950] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1664.759133] loop3: detected capacity change from 0 to 140 [ 1664.760424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1664.775172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1664.775827] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1664.778890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1664.795924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:27:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xc00, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:27:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 5) 12:27:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000001b"], 0x6c}}, 0x0) 12:27:26 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1bc, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}]}, 0x1bc}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1664.870269] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:27:26 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:27:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xd00, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:27:26 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000001c"], 0x6c}}, 0x0) 12:27:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 6) [ 1664.991129] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1664.991397] loop3: detected capacity change from 0 to 140 [ 1664.999569] FAULT_INJECTION: forcing a failure. [ 1664.999569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1665.000785] CPU: 0 UID: 0 PID: 39870 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1665.000802] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1665.000810] Call Trace: [ 1665.000814] [ 1665.000819] dump_stack_lvl+0xfa/0x120 [ 1665.000844] should_fail_ex+0x4d7/0x5e0 [ 1665.000866] _copy_from_iter+0x1dc/0x15b0 [ 1665.000881] ? lock_acquire+0x15e/0x2f0 [ 1665.000895] ? __virt_addr_valid+0x1c6/0x5d0 [ 1665.000914] ? find_held_lock+0x2b/0x80 [ 1665.000933] ? __pfx__copy_from_iter+0x10/0x10 [ 1665.000945] ? lock_release+0xc8/0x290 [ 1665.000958] ? __virt_addr_valid+0x100/0x5d0 [ 1665.000976] ? __check_object_size+0x57b/0x880 [ 1665.000997] netlink_sendmsg+0x809/0xd80 [ 1665.001019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1665.001040] ____sys_sendmsg+0xa67/0xc20 [ 1665.001061] ? copy_msghdr_from_user+0xfb/0x150 [ 1665.001076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1665.001100] ? lock_acquire+0x15e/0x2f0 [ 1665.001113] ___sys_sendmsg+0x10f/0x1b0 [ 1665.001129] ? __pfx____sys_sendmsg+0x10/0x10 [ 1665.001147] ? proc_fail_nth_write+0x98/0x250 [ 1665.001166] ? lock_acquire+0x15e/0x2f0 [ 1665.001178] ? __fget_files+0x34/0x3b0 [ 1665.001195] ? find_held_lock+0x2b/0x80 [ 1665.001210] ? __fget_files+0x203/0x3b0 [ 1665.001227] ? lock_release+0xc8/0x290 [ 1665.001240] ? __fget_files+0x20d/0x3b0 [ 1665.001262] __sys_sendmsg+0x150/0x200 [ 1665.001276] ? __pfx___sys_sendmsg+0x10/0x10 [ 1665.001296] ? __pfx_ksys_write+0x10/0x10 [ 1665.001319] do_syscall_64+0xbf/0x360 [ 1665.001333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.001346] RIP: 0033:0x7fce1d622b19 [ 1665.001355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1665.001367] RSP: 002b:00007fce1ab98188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1665.001378] RAX: ffffffffffffffda RBX: 00007fce1d735f60 RCX: 00007fce1d622b19 [ 1665.001387] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1665.001394] RBP: 00007fce1ab981d0 R08: 0000000000000000 R09: 0000000000000000 [ 1665.001401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1665.001408] R13: 00007ffcd80919ff R14: 00007fce1ab98300 R15: 0000000000022000 [ 1665.001423] [ 1665.038018] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.7'. 12:27:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 7) [ 1665.070866] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1665.116180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1665.151265] FAULT_INJECTION: forcing a failure. [ 1665.151265] name failslab, interval 1, probability 0, space 0, times 0 [ 1665.152319] CPU: 0 UID: 0 PID: 39982 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1665.152336] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1665.152344] Call Trace: [ 1665.152349] [ 1665.152354] dump_stack_lvl+0xfa/0x120 [ 1665.152381] should_fail_ex+0x4d7/0x5e0 [ 1665.152401] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1665.152424] should_failslab+0xc2/0x120 [ 1665.152438] __kmalloc_noprof+0xb4/0x4b0 [ 1665.152459] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1665.152481] genl_family_rcv_msg_doit+0xab/0x2f0 [ 1665.152499] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1665.152520] ? cap_capable+0xdb/0x3b0 [ 1665.152542] ? security_capable+0x2f/0x90 [ 1665.152559] ? ns_capable+0xe2/0x120 [ 1665.152577] genl_rcv_msg+0x532/0x7e0 [ 1665.152596] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1665.152612] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1665.152631] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 1665.152643] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1665.152660] ? __lock_acquire+0x694/0x1b70 [ 1665.152676] netlink_rcv_skb+0x147/0x430 [ 1665.152696] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1665.152714] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1665.152736] ? netlink_deliver_tap+0x1ae/0xce0 [ 1665.152750] ? is_vmalloc_addr+0x86/0xa0 [ 1665.152770] genl_rcv+0x28/0x40 [ 1665.152785] netlink_unicast+0x53d/0x7f0 [ 1665.152802] ? __pfx_netlink_unicast+0x10/0x10 [ 1665.152822] netlink_sendmsg+0x8ac/0xd80 [ 1665.152840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1665.152861] ____sys_sendmsg+0xa67/0xc20 [ 1665.152882] ? copy_msghdr_from_user+0xfb/0x150 [ 1665.152898] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1665.152921] ? lock_acquire+0x15e/0x2f0 [ 1665.152935] ___sys_sendmsg+0x10f/0x1b0 [ 1665.152950] ? __pfx____sys_sendmsg+0x10/0x10 [ 1665.152968] ? proc_fail_nth_write+0x98/0x250 [ 1665.152990] ? lock_acquire+0x15e/0x2f0 [ 1665.153001] ? __fget_files+0x34/0x3b0 [ 1665.153018] ? find_held_lock+0x2b/0x80 [ 1665.153036] ? __fget_files+0x203/0x3b0 [ 1665.153052] ? lock_release+0xc8/0x290 [ 1665.153066] ? __fget_files+0x20d/0x3b0 [ 1665.153088] __sys_sendmsg+0x150/0x200 [ 1665.153102] ? __pfx___sys_sendmsg+0x10/0x10 [ 1665.153122] ? __pfx_ksys_write+0x10/0x10 [ 1665.153146] do_syscall_64+0xbf/0x360 [ 1665.153159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.153173] RIP: 0033:0x7fce1d622b19 [ 1665.153183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1665.153195] RSP: 002b:00007fce1ab98188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1665.153206] RAX: ffffffffffffffda RBX: 00007fce1d735f60 RCX: 00007fce1d622b19 [ 1665.153214] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1665.153222] RBP: 00007fce1ab981d0 R08: 0000000000000000 R09: 0000000000000000 [ 1665.153229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1665.153237] R13: 00007ffcd80919ff R14: 00007fce1ab98300 R15: 0000000000022000 [ 1665.153253] [ 1665.217656] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1675.749647] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1675.751199] loop3: detected capacity change from 0 to 140 [ 1675.761273] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1675.772051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:27:37 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000001d"], 0x6c}}, 0x0) 12:27:37 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x0, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:27:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xf00, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:27:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:27:37 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:27:37 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:27:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadf"], 0x36) [ 1675.814155] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1675.842284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:27:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 8) 12:27:37 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1675.846766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1675.856140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1675.904094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1675.919187] loop3: detected capacity change from 0 to 140 [ 1675.919858] Bluetooth: hci3: ACL packet for unknown connection handle 201 12:27:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 9) 12:27:37 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000001f"], 0x6c}}, 0x0) 12:27:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x1f00, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) [ 1675.954232] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1676.003803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1676.048908] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1676.076227] FAULT_INJECTION: forcing a failure. [ 1676.076227] name failslab, interval 1, probability 0, space 0, times 0 [ 1676.078118] CPU: 0 UID: 0 PID: 40124 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1676.078148] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1676.078161] Call Trace: [ 1676.078169] [ 1676.078177] dump_stack_lvl+0xfa/0x120 [ 1676.078219] should_fail_ex+0x4d7/0x5e0 [ 1676.078255] should_failslab+0xc2/0x120 [ 1676.078278] kmem_cache_alloc_node_noprof+0x71/0x470 [ 1676.078310] ? __alloc_skb+0x2ab/0x370 [ 1676.078344] __alloc_skb+0x2ab/0x370 [ 1676.078370] ? __pfx___alloc_skb+0x10/0x10 [ 1676.078397] ? genl_rcv_msg+0x532/0x7e0 [ 1676.078437] netlink_ack+0x167/0xbf0 [ 1676.078475] netlink_rcv_skb+0x344/0x430 [ 1676.078504] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1676.078537] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1676.078580] ? netlink_deliver_tap+0x1ae/0xce0 [ 1676.078606] ? is_vmalloc_addr+0x86/0xa0 [ 1676.078640] genl_rcv+0x28/0x40 [ 1676.078667] netlink_unicast+0x53d/0x7f0 [ 1676.078707] ? __pfx_netlink_unicast+0x10/0x10 [ 1676.078745] netlink_sendmsg+0x8ac/0xd80 [ 1676.078778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1676.078818] ____sys_sendmsg+0xa67/0xc20 [ 1676.078854] ? copy_msghdr_from_user+0xfb/0x150 [ 1676.078882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1676.078926] ? lock_acquire+0x15e/0x2f0 [ 1676.078953] ___sys_sendmsg+0x10f/0x1b0 [ 1676.078982] ? __pfx____sys_sendmsg+0x10/0x10 [ 1676.079015] ? proc_fail_nth_write+0x98/0x250 [ 1676.079050] ? lock_acquire+0x15e/0x2f0 [ 1676.079072] ? __fget_files+0x34/0x3b0 [ 1676.079103] ? find_held_lock+0x2b/0x80 [ 1676.079132] ? __fget_files+0x203/0x3b0 [ 1676.079162] ? lock_release+0xc8/0x290 [ 1676.079188] ? __fget_files+0x20d/0x3b0 [ 1676.079228] __sys_sendmsg+0x150/0x200 [ 1676.079255] ? __pfx___sys_sendmsg+0x10/0x10 [ 1676.079292] ? __pfx_ksys_write+0x10/0x10 [ 1676.079334] do_syscall_64+0xbf/0x360 [ 1676.079357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1676.079382] RIP: 0033:0x7fce1d622b19 [ 1676.079399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1676.079421] RSP: 002b:00007fce1ab98188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1676.079442] RAX: ffffffffffffffda RBX: 00007fce1d735f60 RCX: 00007fce1d622b19 [ 1676.079456] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 1676.079470] RBP: 00007fce1ab981d0 R08: 0000000000000000 R09: 0000000000000000 [ 1676.079483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1676.079496] R13: 00007ffcd80919ff R14: 00007fce1ab98300 R15: 0000000000022000 [ 1676.079525] 12:27:37 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1676.149678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:27:37 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:27:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x5308, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:27:37 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000020"], 0x6c}}, 0x0) 12:27:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 10) 12:27:37 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) [ 1676.266257] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1676.274385] loop3: detected capacity change from 0 to 140 [ 1676.285962] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended 12:27:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadf"], 0x36) [ 1676.294161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:27:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:27:38 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1bc, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1bc}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1676.340627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1676.350250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1676.386897] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1676.390244] loop3: detected capacity change from 0 to 140 [ 1676.394449] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1676.397985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 12:27:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 11) 12:27:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021"], 0x6c}}, 0x0) 12:27:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x6000, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:27:38 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1bc, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1bc}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1676.494949] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1676.499487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1676.507448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1676.543415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:27:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xe703, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:27:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 12) 12:27:38 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000025"], 0x6c}}, 0x0) [ 1676.655070] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1676.659984] loop3: detected capacity change from 0 to 140 [ 1676.685206] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1676.693441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1676.760964] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:27:47 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 12:27:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3"], 0x36) 12:27:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:27:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 13) 12:27:47 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:27:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0xf000, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:27:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000026"], 0x6c}}, 0x0) 12:27:47 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1bc, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1bc}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) [ 1685.601057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1685.607939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1685.617155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1685.618169] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1685.619825] loop3: detected capacity change from 0 to 140 [ 1685.627564] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1685.632955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1685.635377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1685.680560] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:27:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x30000, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:27:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 14) 12:27:47 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:27:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000027"], 0x6c}}, 0x0) [ 1685.776197] FAULT_INJECTION: forcing a failure. [ 1685.776197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1685.778337] CPU: 0 UID: 0 PID: 40413 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1685.778374] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1685.778387] Call Trace: [ 1685.778396] [ 1685.778405] dump_stack_lvl+0xfa/0x120 [ 1685.778450] should_fail_ex+0x4d7/0x5e0 [ 1685.778489] _copy_from_user+0x30/0xd0 [ 1685.778517] kstrtouint_from_user+0xbd/0x180 [ 1685.778551] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1685.778585] ? __lock_acquire+0xc65/0x1b70 [ 1685.778625] proc_fail_nth_write+0x7c/0x250 [ 1685.778660] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1685.778704] ? lock_is_held_type+0x9e/0x120 [ 1685.778746] vfs_write+0x2b7/0x10c0 [ 1685.778780] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1685.778820] ? __pfx_vfs_write+0x10/0x10 [ 1685.778855] ? lock_release+0xc8/0x290 [ 1685.778883] ? __fget_files+0x20d/0x3b0 [ 1685.778927] ksys_write+0x121/0x240 [ 1685.778960] ? __pfx_ksys_write+0x10/0x10 [ 1685.779004] do_syscall_64+0xbf/0x360 [ 1685.779029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.779053] RIP: 0033:0x7fce1d5d55ff [ 1685.779070] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1685.779093] RSP: 002b:00007fce1ab98170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1685.779116] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fce1d5d55ff [ 1685.779132] RDX: 0000000000000001 RSI: 00007fce1ab981e0 RDI: 0000000000000004 [ 1685.779146] RBP: 00007fce1ab981d0 R08: 0000000000000000 R09: 0000000000000000 [ 1685.779160] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1685.779174] R13: 00007ffcd80919ff R14: 00007fce1ab98300 R15: 0000000000022000 [ 1685.779206] [ 1685.806093] ================================================================== [ 1685.807291] BUG: KASAN: slab-use-after-free in flush_tlb_func+0x24d/0x560 [ 1685.808431] Write of size 8 at addr ffff888015ac4700 by task syz-executor.2/40413 [ 1685.809614] [ 1685.809900] CPU: 0 UID: 0 PID: 40413 Comm: syz-executor.2 Not tainted 6.16.0-rc4-next-20250630 #1 PREEMPT(voluntary) [ 1685.809937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1685.809950] Call Trace: [ 1685.809958] [ 1685.809967] dump_stack_lvl+0xca/0x120 [ 1685.810011] print_report+0xcb/0x670 [ 1685.810039] ? __virt_addr_valid+0x100/0x5d0 [ 1685.810075] ? flush_tlb_func+0x24d/0x560 [ 1685.810112] ? flush_tlb_func+0x24d/0x560 [ 1685.810147] kasan_report+0xca/0x100 [ 1685.810178] ? flush_tlb_func+0x24d/0x560 [ 1685.810216] kasan_check_range+0x39/0x1b0 [ 1685.810253] flush_tlb_func+0x24d/0x560 [ 1685.810288] ? lock_acquire+0x15e/0x2f0 [ 1685.810317] ? __pfx_flush_tlb_func+0x10/0x10 [ 1685.810354] __flush_smp_call_function_queue+0x20d/0x740 [ 1685.810394] __sysvec_call_function_single+0x6d/0x360 [ 1685.810435] sysvec_call_function_single+0x5f/0xc0 [ 1685.810471] asm_sysvec_call_function_single+0x1a/0x20 [ 1685.810501] RIP: 0010:handle_softirqs+0x174/0x770 [ 1685.810536] Code: c8 83 83 3c 0a 00 00 01 c7 44 24 20 0a 00 00 00 48 89 44 24 18 65 66 c7 05 cf 84 47 06 00 00 e8 22 65 40 00 fb bb ff ff ff ff <48> c7 c5 c0 c0 a0 85 41 0f bc de 83 c3 01 0f 85 9b 00 00 00 e9 8d [ 1685.810564] RSP: 0018:ffff88806ce08f78 EFLAGS: 00000202 [ 1685.810585] RAX: 000000000000033e RBX: 00000000ffffffff RCX: 0000000000000008 [ 1685.810599] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff813b5b6e [ 1685.810614] RBP: ffff88802df87aa8 R08: 0000000000000001 R09: 0000000000000001 [ 1685.810630] R10: ffffffff86438657 R11: 0000000000000001 R12: 0000000000000000 [ 1685.810649] R13: 0000000000000000 R14: 0000000000000102 R15: 0000000000000000 [ 1685.810669] ? handle_softirqs+0x16e/0x770 [ 1685.810702] ? handle_softirqs+0x16e/0x770 [ 1685.810742] __irq_exit_rcu+0xc4/0x100 [ 1685.810774] irq_exit_rcu+0x9/0x20 [ 1685.810811] sysvec_apic_timer_interrupt+0x70/0x80 [ 1685.810845] [ 1685.810852] [ 1685.810860] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1685.810891] RIP: 0010:dump_stack_lvl+0x115/0x120 [ 1685.810927] Code: fc ff ff 4c 89 e2 31 f6 31 ff e8 e6 40 7b fc e8 e1 f7 a4 fc 48 89 ee 31 ff e8 d7 95 c4 fc e8 72 9a c4 fc e8 7d c4 cc fc fb 5b <5d> 41 5c e9 63 9a c4 fc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 [ 1685.810950] RSP: 0018:ffff88802df87b50 EFLAGS: 00000202 [ 1685.810973] RAX: 000000000000033b RBX: ffffffff85e964a0 RCX: 0000000000000080 [ 1685.810988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff84aefc13 [ 1685.811003] RBP: 0000000000000200 R08: 0000000000000001 R09: 0000000000000001 [ 1685.811017] R10: ffffffff86438657 R11: 0000000000000001 R12: ffffffff8530f500 [ 1685.811033] R13: ffffffff85e964b0 R14: 0000000000000000 R15: 0000000000000000 [ 1685.811059] ? dump_stack_lvl+0x113/0x120 [ 1685.811096] should_fail_ex+0x4d7/0x5e0 [ 1685.811137] _copy_from_user+0x30/0xd0 [ 1685.811163] kstrtouint_from_user+0xbd/0x180 [ 1685.811197] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1685.811236] ? __lock_acquire+0xc65/0x1b70 [ 1685.811265] proc_fail_nth_write+0x7c/0x250 [ 1685.811305] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1685.811339] ? lock_is_held_type+0x9e/0x120 [ 1685.811381] vfs_write+0x2b7/0x10c0 [ 1685.811412] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1685.811453] ? __pfx_vfs_write+0x10/0x10 [ 1685.811488] ? lock_release+0xc8/0x290 12:27:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x34000, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) [ 1685.811513] ? __fget_files+0x20d/0x3b0 [ 1685.811557] ksys_write+0x121/0x240 [ 1685.811590] ? __pfx_ksys_write+0x10/0x10 [ 1685.811633] do_syscall_64+0xbf/0x360 [ 1685.811656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.811698] RIP: 0033:0x7fce1d5d55ff [ 1685.811716] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1685.811739] RSP: 002b:00007fce1ab98170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1685.811764] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fce1d5d55ff [ 1685.811782] RDX: 0000000000000001 RSI: 00007fce1ab981e0 RDI: 0000000000000004 [ 1685.811797] RBP: 00007fce1ab981d0 R08: 0000000000000000 R09: 0000000000000000 [ 1685.811812] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1685.811826] R13: 00007ffcd80919ff R14: 00007fce1ab98300 R15: 0000000000022000 [ 1685.811856] [ 1685.811864] [ 1685.878827] Allocated by task 281: [ 1685.879437] kasan_save_stack+0x24/0x50 [ 1685.880143] kasan_save_track+0x14/0x30 [ 1685.880847] __kasan_slab_alloc+0x59/0x70 [ 1685.881569] kmem_cache_alloc_noprof+0x13c/0x470 [ 1685.882389] copy_process+0x6f3a/0x73e0 [ 1685.883069] kernel_clone+0xea/0x820 [ 1685.883735] __do_sys_clone+0xce/0x120 [ 1685.884405] do_syscall_64+0xbf/0x360 [ 1685.885058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.885937] [ 1685.886237] Freed by task 40293: [ 1685.886797] kasan_save_stack+0x24/0x50 [ 1685.887478] kasan_save_track+0x14/0x30 [ 1685.888165] kasan_save_free_info+0x3a/0x60 [ 1685.888906] __kasan_slab_free+0x38/0x50 [ 1685.889614] kmem_cache_free+0x2a1/0x460 [ 1685.890342] mmput+0x305/0x390 [ 1685.890921] do_exit+0x79d/0x2970 [ 1685.891528] do_group_exit+0xd3/0x2a0 [ 1685.892202] get_signal+0x2315/0x2340 [ 1685.892863] arch_do_signal_or_restart+0x80/0x790 [ 1685.893713] exit_to_user_mode_loop+0x8b/0x100 [ 1685.894500] do_syscall_64+0x2f7/0x360 [ 1685.895166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.896068] [ 1685.896368] The buggy address belongs to the object at ffff888015ac3d80 [ 1685.896368] which belongs to the cache mm_struct of size 2456 [ 1685.898387] The buggy address is located 2432 bytes inside of [ 1685.898387] freed 2456-byte region [ffff888015ac3d80, ffff888015ac4718) [ 1685.900459] [ 1685.900759] The buggy address belongs to the physical page: [ 1685.901691] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x15ac0 [ 1685.903020] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1685.904322] memcg:ffff88800ebe2801 [ 1685.904919] flags: 0x100000000000040(head|node=0|zone=1) [ 1685.905831] page_type: f5(slab) [ 1685.906416] raw: 0100000000000040 ffff888008c4bc80 ffffea0000fa6000 dead000000000002 [ 1685.907723] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff88800ebe2801 [ 1685.909024] head: 0100000000000040 ffff888008c4bc80 ffffea0000fa6000 dead000000000002 [ 1685.910335] head: 0000000000000000 00000000000c000c 00000000f5000000 ffff88800ebe2801 [ 1685.911683] head: 0100000000000003 ffffea000056b001 00000000ffffffff 00000000ffffffff [ 1685.913005] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1685.914328] page dumped because: kasan: bad access detected [ 1685.915286] [ 1685.915589] Memory state around the buggy address: [ 1685.916439] ffff888015ac4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1685.917688] ffff888015ac4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1685.918927] >ffff888015ac4700: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1685.920147] ^ [ 1685.920742] ffff888015ac4780: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 1685.921966] ffff888015ac4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1685.923180] ================================================================== [ 1685.924417] Disabling lock debugging due to kernel taint [ 1685.937889] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1685.938574] loop3: detected capacity change from 0 to 140 [ 1685.944531] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1685.947992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1685.987549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 12:27:55 executing program 6: syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) 12:27:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[], 0x36) signalfd4(r0, &(0x7f0000000000)={[0x5b6]}, 0x8, 0x800) 12:27:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0x10, 0x3, 0x3a) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x1f, 0x20, 0x1ff, 0x8}}, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="008000080211000001080211000000080211000000000000000000000000006401000006020202020202010882848b967da3168be210e5c0f6f76a28bc0695f111b90d9dd96fa290dbabce61d88e4fa498111149ef99046fa7ed77a7181b7eeb1bf5f8e70665e53117233979b27c373ebc4400f5610d7ce53431027e099237ceaf088d7670527117cdaaf210b0fb8492a482f0011679cd81276554a9b89c9de6ee6435350457634b182da173831b05542bc28f12467971837189ba4ec3b2420ee9010dd284a7e12b480cd40ca7041f24a28ca0cba9a2a72500f1042c2e9769b0d67f038fbadff3ef0b97f35a55d3"], 0x36) 12:27:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x80000, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) 12:27:55 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 12:27:55 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf25050000004400098008000100050000000800010000100000080022000004000008000200486900000800010000000000080001000200000008000100ffff00000800010000040000"], 0x58}, 0x1, 0x0, 0x0, 0x4c045}, 0x4000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGABS20(r4, 0x80184560, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x12}, {r2, 0x8000}, {r0, 0x2}, {r3, 0x14}, {r4, 0xc194}, {r0, 0x4000}], 0x6, &(0x7f00000004c0), &(0x7f0000000500), 0x8) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x1c4, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x470}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}]}, 0x1c4}}, 0x4000800) syz_emit_vhci(&(0x7f0000000580)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_move_chan_cfm={{0x10, 0x4, 0x4}, {0x9b2, 0x109}}]}}, 0x11) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000030000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af301000400000000000000000000000100000004", 0x5d, 0x8c60}], 0x0, &(0x7f00000000c0)={[{@barrier_val}]}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) 12:27:55 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setresuid(0x0, 0xee01, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000028"], 0x6c}}, 0x0) 12:27:55 executing program 5: r0 = gettid() r1 = fork() clone3(&(0x7f00000002c0)={0x2000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x11}, &(0x7f00000001c0)=""/48, 0x30, &(0x7f0000000200)=""/127, &(0x7f0000000280)=[r1, r1], 0x2}, 0x58) rt_sigqueueinfo(r2, 0x5, &(0x7f0000000340)={0x5, 0x100, 0xc5eab1c6}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006a00)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000003700)=[{&(0x7f0000000440)=""/22, 0x16}, {&(0x7f0000000480)=""/236, 0xec}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/211, 0xd3}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/122, 0x7a}], 0x7, &(0x7f0000003780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000003840)=@abs, 0x6e, &(0x7f0000003980)=[{&(0x7f00000038c0)=""/103, 0x67}, {&(0x7f0000003940)=""/19, 0x13}], 0x2, &(0x7f00000039c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a00)=""/160, 0xa0}], 0x1, &(0x7f0000003b00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003b40), 0x6e, &(0x7f00000050c0)=[{&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000004bc0)=""/235, 0xeb}, {&(0x7f0000004cc0)=""/23, 0x17}, {&(0x7f0000004d00)=""/107, 0x6b}, {&(0x7f0000004d80)=""/196, 0xc4}, {&(0x7f0000004e80)=""/43, 0x2b}, {&(0x7f0000004ec0)=""/128, 0x80}, {&(0x7f0000004f40)=""/247, 0xf7}, {&(0x7f0000005040)=""/73, 0x49}], 0x9, &(0x7f0000005180)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f00000051c0)=@abs, 0x6e, &(0x7f0000006580)=[{&(0x7f0000005240)=""/21, 0x15}, {&(0x7f0000005280)=""/255, 0xff}, {&(0x7f0000005380)=""/173, 0xad}, {&(0x7f0000005440)=""/183, 0xb7}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f0000006500)=""/73, 0x49}], 0x6, &(0x7f0000006740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000ff7f960000000000000067bc368cffffff00", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYRES32, @ANYRES16=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x120}}], 0x5, 0x0, &(0x7f0000006880)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000068c0)='/proc/vmstat\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) kcmp(r0, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) [ 1694.207416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1694.252738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1694.264959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1694.297751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1694.301502] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1694.303351] loop3: detected capacity change from 0 to 140 [ 1694.327015] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 1694.333311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1694.387051] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. VM DIAGNOSIS: 12:27:47 Registers: info registers vcpu 0 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828b97f5 RDI=ffffffff8871efa0 RBP=ffffffff8871ef60 RSP=ffff88806ce08838 R8 =0000000000000000 R9 =ffffed100153f046 R10=000000000000006e R11=65767379735f5f20 R12=000000000000006e R13=0000000000000010 R14=ffffffff8871ef60 R15=ffffffff828b97e0 RIP=ffffffff828b984d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fce1ab98700 00000000 00000000 GS =0000 ffff8880e55f2000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d622000 CR3=0000000042031000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffffffff0000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff81b916b8 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88801593fc01 RSI=ffff88801593fc00 RDI=ffff88801593fc00 RBP=ffff88801593f360 RSP=ffff88801593f298 R8 =ffffffff868a0ee4 R9 =ffff88801593f348 R10=000000000003baf4 R11=0000000000027686 R12=ffff88801593f368 R13=ffff88801593f350 R14=ffff88801593fc08 R15=ffff88801593f308 RIP=ffffffff8135481d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6acab48900 00000000 00000000 GS =0000 ffff8880e56f2000 00000000 00000000 LDT=0000 fffffe0600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6ac9f9f180 CR3=000000000ac9c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=30306234386136303638616663356134 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=b50a113d86647bce00000000002fbc98 XMM05=d3fdd5f48436fbd700000000000aead0 XMM06=1ef8a097309c4db500000000000ae988 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=20000000000000002000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000