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", 0x1000}, {&(0x7f0000001700)="4254f478a0c00fb5df21d8483ce5670f11ec8e781c9c77f79021fdc92fbb8e09db834237d6d3da5e84b87b20d0229fb0b9bcf901c5e4a7efd3b93fddd7a1ea59297b29673ba5fd44d5b0b698ab49", 0x4e}, {&(0x7f0000001780)="576e18674d147dfc94a941a72134f2c95430fce392b86af7d7dcc049cf7306279e981fbfb8b1117fd83742960b5abe1b499626ddaebbaf772c5d40f3b90614f14e48d956ff4e372f1e347b9423bb5b93bf50262abd2a5e942f07743489db6f1058712e3db1a4ea3a44c91932ac66c5d699c71f101ea656b7d39193d86dbd0ef02fdb9a734a5768192f", 0x89}, {&(0x7f0000001840)="825a3ad177012e4adf2e8928ef744b3552a7861daea924cbace79a4943997cf846a0482ee79d46e71e6ebd2e825f66878f7879785283d1c7592eda801b5eba1f37f9ad5d486919bb8ea135713c3332d316672de8e4e62857f30832f1cb872876e8045f432ea3bbd8705ae75335a9cb4ecf4a67df808c6c1d80dba8e0d42af9d2ab222a818234a4201ec06b36c8d18b2f2024842028b796e37ff718c4", 0x9c}], 0x6, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}, @dstopts_2292={{0x78, 0x29, 0x4, {0x6, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x3, 0x51, "5c73865e19b91714cfe63cc89f0d4a854ff50bb345320b58757226d413685fc42204d4fcc9b9db24a5d99e1c1d5e00a61a7edc3d2818e8c61d83361341d6f9c77049951d8e2ac792f13874f856cdff5440"}]}}}], 0x90}}, {{&(0x7f0000001a40)={0xa, 0x4e22, 0x5, @loopback, 0x2}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001a80)="4504f8cb4b5c86147ecbb93e7db9ddfee64a95c39d27a0eea9a97e7e586db641744e6fd4862211cba6b7abf101eadc94b26e67a44f52222e3361537a609a6d4e284bc6014233d06d9a6190e1ee737eaf2d207a3e2177997be73dc7a6751e8dbcd3f82c2c2d36bacab91c67df39ba33170ffb50409816518c33910046bd29ff08635f8d6abdde7bd13f4cd4c307baec339073f1f17fb4de624fc4b729e67c643dc1b0258c34d61802120b32a7b7cda16c3efea315b48b4719f937b2", 0xbb}], 0x1, &(0x7f0000001b80)=[@rthdrdstopts={{0x30, 0x29, 0x37, {0x1, 0x2, '\x00', [@ra={0x5, 0x2, 0x673b}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0xff}, @ra={0x5, 0x2, 0xffff}, @ra={0x5, 0x2, 0x401}]}}}, @rthdrdstopts={{0x250, 0x29, 0x37, {0x87, 0x46, '\x00', [@generic={0xcf, 0x75, "3617f7c0c3e2dc41f91401bed5ba1c2e3742e041a594692d7342aa6f3697cadd97fd65a5439077c5065bb369f3df737f3d82ec3c665ee61d0fc1b92cee3b411106542d4b3bbb5396e1b947d3d97b12a27e97a521e7b81cf84d1672e9dd7c1407175ad68137a2664d730899addfa51cdb4ec4571fee"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @calipso={0x7, 0x38, {0x2, 0xc, 0x8, 0x8, [0x5, 0x8, 0x7, 0x8, 0x9, 0x4]}}, @generic={0x40, 0x4b, "4b614c6607140b1a1286744d5ce5c92ecea668ddb7ec2d0cdeddcae24e24a0e21fc2d61fc10fea8467d2f9ff45fd643b52895ee497839fa02d27ffb45775ee4acf22e0787f655ed9bc9784"}, @calipso={0x7, 0x40, {0x3, 0xe, 0x6, 0x1, [0x7, 0x400, 0x6, 0x7166, 0x7, 0xff, 0xab6]}}, @generic={0x1, 0xc0, "154d6b6113add94831ad316428099cccadb3cf58965a15668eb9802ff7c4e40cbc7c682d8e3dda75306cc0003e20fae4cc2932a2fd21f01862ce6ff1fbe0c056d88f5f3588b1e336a5c14dcd4fc559cd1cc5d5300b2daf7a46a86cd35e8dd4653d89b57bc9eae7cd063003fcbbee13e0c4b01b3a3b2fb48dfab4435d6aa8e949b12f46172a3b518a6dd8e6e2ef52d3c188a5010a2fddf55afbdc22a8700995eb1897fef95e20f123b7d827acf4a0ebca25fcf907a85df1a51067d9b5d7d07363"}, @calipso={0x7, 0x20, {0x0, 0x6, 0x7f, 0xd1, [0x0, 0x6fe, 0xfffffffffffff800]}}]}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x16, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x89}, @hao={0xc9, 0x10, @loopback}, @jumbo]}}}], 0x2b8}}], 0x3, 0x4000081)

[ 1012.330051] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
11:28:16 executing program 6:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', 0x0, 0x0)
read(r0, &(0x7f0000000100)=""/174, 0xae)

[ 1012.337315] EXT4-fs (loop1): get root inode failed
[ 1012.338756] EXT4-fs (loop1): mount failed
11:28:17 executing program 7:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
read(r0, 0x0, 0x0)

11:28:27 executing program 7:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
read(r0, 0x0, 0x0)

11:28:27 executing program 2:
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x3, 0x80, 0x6, 0x9}]})
setgroups(0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={<r3=>0x0, 0x0, <r4=>0x0}, &(0x7f0000008600)=0xc)
setregid(r4, 0x0)
setregid(r4, r1)
r5 = getegid()
getgroups(0x0, &(0x7f0000000ec0))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES32=r3, @ANYRES32, @ANYRESHEX, @ANYBLOB="65303b266e57984be6b619e06700"])
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000000080)=0xc)
setregid(r7, 0x0)
getgroups(0x7, &(0x7f0000000140)=[r7, r5, 0x0, 0x0, 0xee01, 0x0, 0xee01])

11:28:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:28:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:28:27 executing program 6:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', 0x0, 0x0)
read(r0, &(0x7f0000000100)=""/174, 0xae)

11:28:27 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x1ff, 0x80, 0x4, 0x5}, {0x8000, 0x1, 0x8, 0x9}, {0x7, 0x3, 0xb6, 0xff}, {0x549, 0x33, 0x3, 0x4025}, {0x81, 0xc9, 0x80, 0x4e0}, {0x5, 0x5, 0xa4, 0x7e10}]})
setgroups(0x0, 0x0)
setfsuid(0x0)

11:28:27 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="2313ba01c7e0ec80e68db8fdde27dc464153394bdf23b61cdf47641c3e4253072c0a76f94ec1441601b18396a59aecbb3ef76561d69b41466aca4ef8b837730da895eb7a5d5b3457ae4458566311c16323caefbb4d6d516ae35895507483100699126d242598fc5b0b222def533f90c78d1b79c84b8c2113dd62741c7b3596157854e1913c35a3e1a0cc7a996633a00817656ddcbd046d7dbf05cdad0de784", 0x9f}, {&(0x7f0000000240)="2cfb8f7545887ce92f8ee926c293c09f8bf1fb05343643fa22cab65c8920e1f569c382051a6f97a0865336a0472ca84968f750d59b3119450d23dee381fb0a5416d02c89cd294b146981582382dc05e5c3f6443a1cca3fa991ad63aab885f27a8a6508bc6738ce82258368b9e64082ffa311de053a6f52768f971a540ce64145efba2c6addc4c86233db89caff12298823581179f916d65ef2ac12fe2ede4e7802d818335bb69038e141207f39", 0xad}, {&(0x7f0000000300)="8d280bb304df36ee15e647cd5e7f0dff35c5d286738c01a1a181e07373677bc5238557d781fe9f9827939f244e6199653fc09e93bb8ae6c8b0d9c2cda801299efd3a46b2aedd539045032ee0370a1adcc4469565d795deab487f6b25241f0d148bd98f1d675c126ae06b4c55cbbda0b046836fb11fa2", 0x76}, {&(0x7f0000000380)="33bd23f5d75b847e7b854ddd8427c8d2e9b8e8c3e55f90ac6d8cb383e6ce8b2f1a856b5c2c545bb8b78d95970075f6bc23f3e24379983439e2d5935a36cb7f4f8434d6545820d4ad1898c5602b81de0736010849d13f201735c5dc43df3ee09d77e383e1aff0b0898dee53f1736e957788da52ff81d46f08db846f355564ea3c1b03ae9397e06709b571ae351572ea9bea5f611e5c8206775408f833ea6deeecf40e2414a0d2464b14e989a353d465bedfc4347aa071f1be72469bed", 0xbc}, {&(0x7f0000000440)="2fcc2d8bdf8c59fec7165bdfda265534c0681135da509614185b967a0a5c21ace6a9", 0x22}], 0x5, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x40, "5934abdc1d58d91978920f91c5fd0475d8376954386d2c3c15bab0282e7e51a161381c58f1db4bcd6d6971f93143ec9b383c010922b4da8156472dd21e14eaa5"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0xa8}}, {{&(0x7f00000005c0)={0xa, 0x4e22, 0x7, @local, 0x6}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000600)="d74835f11aa717680a600e5d254c047b5b647fec040781b517bc7d3d88d816cfab5c2e046697654c16a03974fff597a0c6bb3485126bcc1171d8e6039798", 0x3e}, {&(0x7f0000000640)="46a2a15c2618555a43688661fc8606491a0a55e5c100777fc74d6bb5074147a9c447a329944ad0eb40b2c4e1a2ce42ca5c692e055bd6df49b7956a5e3676e1e74aa426c6243c240e9b5a404b37932d76736e50590ace6a972774d15c8ff5db2f76e3a78355008f87f38a180ba5d3f958f93db6be18d91725ca1cabc5b44f9a051156620c29775c6d5e05820e96a5901953630bb70f1303cf488f0fef341aa46226282f", 0xa3}, {&(0x7f0000000700)="e664942e307eca10d1fb167416b55fa795e607abcb59ed210729d69651bacc041d7efb375cc09ef1ea269a2e9482c615a31c8e47dce8546689e6b791d347bcbf0e4aaebcf33444fb0ab2eed5c738a07a3bdf71d704f44e7acc771b13545ac08365d7d20468e19fcf700cec17e1c2735bdd319e23a667fe7469892bcafb066e4fefcb713abb012c8f1b99a8461c133170ce3f209516af1ebdd2f05ef34a950e10488d7ecc0755f920d54306a6272d3d79441d4286c82f382ca1528b134197a41fb8f33b7a49371a6fb910a916549942c8462b75773a3a3a720084378697b5852f35f6fff071df861d60d0e061ec7625840ed677bb272ef53fb97f5dae38144f20c7eaa0037e83eaf11d208ee45aaa0115cc73de07ad70d8febbad196f4d302ef1b626ac04b04132258a5b6244c28ed086b546ad7988fe22d70e4318757961ef30869d4dd2337721916892086c6b559e03ece168c2a698b9ea46c128f3eeeb5dd66245aa0f08f23d555b8a6e5161def2f0a0170ccad07013dda6b841de3189d9dc663e40fb48f36b79cfcd0817ce03882366ab49aec39417fc3a77c8acadb3797e866f7895940c46bf848d25e406b5611f82217482649fc3fdc31be5a8024d4592d38885c9e7c4b53f75bb5ce0f903981c9e7f41a730507862187e574d3fe9e312b387de3a59dc097c3d5cee668bf28c6579ec8c694fa7566805ab75072811b34a93a931b8075ec122b62deeae0843e3b9b8ef5f715f0e78c62093033568b0aa919dc0fef6125344d157b5ebcf2d66094516804358ca6491cc2a9cb1c451ec052cf3134c2f881fa3b2f062a7242d8875f200ce2d5dc16791c5f48fbb3836d0af85688010994171a88be55c353fa84d92f2bd6af17568f613457e3220c00c2ee3106f9c4e698a6e61fd0441e6d660f89e7df8f5851de39c59f45f875fdc5f8ac2966e15683ce3078f22ae294c90e54e2eb45ef7477d89e38613379fa17a3ec639c6f75425dc64036f3309b033c66a76a922c472ab2c30e5391ec9a18558e7675287e810bafda85de093fbc1c573617159b252d41cf4e9789adb6d9b5038fb9903d4f3f8b994be49c82bac0b529d34658af867d62ff9e7408a637541403045ac629badf469a8a97a7d32d6caaa58ceaa78f1bd133739304cc545558f3b8284b3953e3c1571b4385182f19d0afe9e3b777114036bcf735e7d5e5d324d10e0387ca93cdda0d1abe0ac59afe6827416e237e67cf84688bd0a19706439fecb836fd73e4819696fa1b79a1b9ea1e077e34edcb498571c15d767ad456f411cb760375029241a46c8b994052ec28768f4ca31fd8daf77d7d80fd49cf1d5e3d71c3b7b432491f90806506fc738e29ea5f1035831b7dade041ef54c77e115ec4a8e644f44531061056df3209c5e09ecd2b8535c6f8bb93331be7d91c0591b0ac46e7227daefe022ca6ab10030371e69927f57ee5db985f5677a1d3482468b4791b454ea79f85e80eda017be9c7f001ed2223933dec9011bee9b9af821dc96b02d18ea42b2bd2c789b4d91163ac902a144f5c77511180f2bc87fc15c8eb9879c131126b0efc105bd3423d7d220a0148a21fb18231c36622b3c1231ba58737943eab8dcc68dc9833df73c9a104eeac71a24cef9ea781c54c95cc13a064867453a53a5c9cf5309a8aca44b9ef60b6036d2e840e4e9ac4329f347a48a2126ca225143a12a9ae182f52f887019807c28d7321916c5880e36e1fcea7d6f46830cb614be65fd313b4226762d6da964ad75e557d321ee5deec14b05e72251907991be904bae17de1e06f9ce9b6da28521e20844575453c1558e4dd76948f39487436ebd0b0cbe1d2824b1da1b44de21a3b6503b7b581fcb949cbdd02c1ad1fcf8ba48a1a42a09a18665b211d6ec43f7d9b5d85875a0795b9c640f0095903709b015369ef27cf06079e50c07e45c3d0a24ba6692efb0458c3ae829dbed2e0a175d831556cb5241c586b8e35695e4bbab388a4944ed4286873f7f869775306de7d6933f5655a753ac80b7596a3b11f98c883a055038f2e04040680c137b18aa1b55699284e2c8796192e920cac5f385367ad5b0a5c55a8462805e7b3bb7457b32f0e161d6fe9d859cc7574f4a6c8c350a6121ad978ca2b3dae6d399428c05d556aa1db7020e33583e8612db92cea1b756be3c19278515e0156bce7ed1a7aa423e77f7c6df6192d097e5e78855deb9b7bbcc69e114ae0e65efd50202b5f910905602b8a29bc9dfa8631ea4fec23e1f3a6d5b01a71a5af886792d3f98e3d0537d0451f4c09cc6e8c7534a7c86da6a46906740cf7fc81e496b4e1affdb73810190c050b002f747439bbf859968167b04eda7965da2e77805851f8f88d4d2f230dddd88ce3b775cd78438446bf721e50646a7b0d835844b1c1d64c48fe221e9fc6d87460fd719615fa2cf014525413653eacabb6af4b480fbec9698f5155dddf6aedeaaf4189b5da120112b049b72785255c91cb7fb86a4f787feb91b20ac0ca6927d72a65c013c557107e38e803d8e2afbe0b6e1ef9f43f31c0582b005233758c2dd21e18d5dc8b0b0c29761fd0641c02abf664e29e0f6271bdecdc6e373d34dff3ac7837ea079ac40a031fb793023a3753ecce81076bcb83d96246aaae5e590afb4ff1992f2c972d6a57f260e335172d99ee65a3917f11aa91de29753ef225eda18aaaf8d8ad5dc679372cbd9f6b760223376a1ec7d50660f305b426a95304c01e562dfff461281a70c85419aaabe3627b6926027b118d633209d536b8db11c0ff7bde67728003c7d964ad196c67e27069242aca2c6caa7ebddb72b211370416a484dd1c0bf06c1c0734f7c4cab4299a2e669f33806dde3295f90b19c11a3e53a2b5d5c0e512ef8a307b612865cbe06321ab777f795f31c95b26ff0a2fc55384551494965d268bd55afefa37bca17bc8f3cb3d28653b74c123121129db54bbdf21ba0c824277e7bc4e2351d114fff0858605b751a0a422d862674cb3e0535f8f91f5c83ea1fa914f7c3a900fd78869ce66ef018411808aa874273fdf8b6de93b15095ad399aaac1b18f046bed32a9d919a7828cc43c993acb3c967580d30748b725ec193cb65df8ca2ed55905a8b46aba5ce709f9593f99fad44c1e256afe3c3a79aa52fded9ae02a7d9d242dd6d3428350c73caf95716c8a9795254418c80fe7574244a3e9096566707620419d185de801a5efb938c58ce150fb234e3edb1f762ab5a46b95de621c6dcb88d38117ea8dea0492e0596e4b5d689698346f582c8e78298e9159f495ec97f89531d94f400201bb3dfee5cd5553eda5040058c1c59a3931cc6de3f5d85e3d35bc851508a1860fd39c4ec91e057a7dfe56ca1ef69185ca07b8765760b4356ab5f409cc2f31d9b0004c232e12c61a7974ae2434d1497a084f7d750ac8b86c1fa3710339760853189ebf8e30c2c6a07f56e8dec080a813e12a002c3de8d9dbfd380fa5a3767c86840dfd8ff86e9a8fee997f3feb39631eb97679fbc2cc153e7afb5b5276ddd7db21d3e36aef0844fd0c15f1144f35ae5b2dff54c68572d900fc626f1bfc78ea435ef82ec1f4501996c2b3e1b572ea19434ae0a536cbba6c98669195cd0d7402d6098bdc56836b1183bac13616849d26e14ad17cbae196ebe2a7392c5fb2975fbed025cb545b01df72a4c219a9a21aba8850d37bfd04a78ec9a269f1af42f163ac032d69d34ac71e38efefd2cd28fb42cde36ce1ed7cc2c20c309085b2882428ac3c42ff4d6a74f567a45a58f05e05758222fa661e8cec6775091cef793cf160862edad6d02c56dbe98d3240274ff66924f3e0c3e70cab86a9d69c6837ddc8d8096f57450b6f6b6f0050c87614da9c709be308f81c390d665e38ee96f8c68720d20ed2b792046c5357b277f311300a8f2771ce0d7e15b1b9d302770223bd294e56ddbac4905fbf3d169671e34322453010307734e41eed1a486b1bb88969dca4762a53dafe7564b540e585b600cb4aae7c805c88c9f063958e21deef0deac72076a88781112c4e208378cc7e4527c17eb60014c9b55ec16750e9c404b7c1ff03bb2e408cb4c29189dec4c6b8308b62688e61a898ffb1ade48b0378c253e512882dd2764d3b5bc71f2aa3c8c4f40bb4b3a1d5cad35841ff608d5f3a8c31409f08773d60f84cece23f551a0e1d473b028b99b7fa47bac505b5181f4ab7552ff07d79f78f2f8d06122504a72d66862d6f4da21128ce9c6b23a0dab645d143440c75219c2f2b272fff28dfd2e713cbca0f0228228c47c15abcd973fa247a2d87395da7c6305d3d41dc513929ea56c3a3663d3080dee60179399b3b4ea51787b99fccb41e2d072d53b97c08e1eb5ba3c3cdfb5eeca44f9ccb8ba32f3b40d72ddda225cf4f64c777d13461a2a412f23e4298224e76fd4e0684064e1de5e7e87bbe1205ddaf2fd6bd0577572a03ca7a76a1db424d9cd376576f2e2af0705a93c5a58d3871193dfe1c6ac2319e4d398e47f00cf4d3ff4e312fd147aac664d028768c6a7383c7a11f2e592172045079e32e4cfa27584bb95efdf47babe2be0cbe60399eae8fc721ce9282e43da408f118e05072be61e5d97dab4fc81f56942ce0efab561b8ae510753810618b45340e363048ba8e981b024eb813977431fcc2604fbd2a953002f85d741835a667a53b4bca24f15d518889176ae9c78527d59122348b7b6fad87c6ea566de839eb04c4baf2232a3bafbc164a403ab917b4f778e4212be3a00a30a43653091ee255a72e5107386dc9969e5ce3dc288b08631aa735af6891ee00083a8dadc6c11ce48ec92a0bc0ee223555e414f4aa20bfc246bc54e35346516da176d2ecbc256e0f75275b5e105409b9cea107ef800051527c3c47780e11829d5a81605d7df2ca2293e3154f380a21739790567defc1715cc95430a42e4fb65698d76e208e7d5970a9763c49c2a22c0f3860207f406670401dca45fef2d9a090d73314d8736ef3c21e5821eba45ef8f155b868b63771efea7fc14076d05031ccf8134e3a9a53ec8f401a099b5149c44d2b49b32379ce4ec6b25c907bbaa16a54e1b7161d7c0fcb2c543c1850a3d91e80d5556256790ec2f031d608fefe984bd7dee83e79406299ea9b0b43ae302d0bc29778669010e391dd7a225bd940961490c7fc9a24b87ac4324e716ad915a5c16fdeef3c06e762fd6a8aa650e4aa8ca340625c1168ad2629a1ada16017b14fa43d11f1129d775f55aa504c5439013524591d9519d924e2a3f6646e7b89113160f99aa888e464cb0fb0097b5ed3623ee7d1a36e4d5cf547eb742743cbd27f719c52290f2fdd4fb96dcaca3c3ce2d7fa14454d377d8a427104bd7aab11350ae6ac9fdf0962e6201d34589347cfad5617e1bf9274e7c1d7aa753f6362f08c70f8a97d86571142b64536ab9cff7a433affd88c6ef9dc3507b77356b8cb3ce1ee7803502d5e6265e69c656059352cc4a7bf6303904a8d73b80453f7fe670750b88c3067da2da05110b49496acfc5a00d9c65e0ebbf5ed7fc6b74a3718c6ec7fca9de89d19de6683ec3ea29ac470a5f55585524835c845aaef214e022f4498730fe63c6057ac9d4c21c5db211991c28bfb5159d5e248451cbc59b5fcd8a1538da6cbccc2b6017142652c45be9d9a1ee31a0031693427564fa680b09e7934871fc284733db5b762f77db50931307b271e18d0de3ec8fcfceb02bec9e3f1269b4c36e1b3e2e75526fd8b93c481f9c12420478d8306203f67e0d8ea3fc83ba89608b8778b7950e9f2d78348063f9494071e", 0x1000}, {&(0x7f0000001700)="4254f478a0c00fb5df21d8483ce5670f11ec8e781c9c77f79021fdc92fbb8e09db834237d6d3da5e84b87b20d0229fb0b9bcf901c5e4a7efd3b93fddd7a1ea59297b29673ba5fd44d5b0b698ab49", 0x4e}, {&(0x7f0000001780)="576e18674d147dfc94a941a72134f2c95430fce392b86af7d7dcc049cf7306279e981fbfb8b1117fd83742960b5abe1b499626ddaebbaf772c5d40f3b90614f14e48d956ff4e372f1e347b9423bb5b93bf50262abd2a5e942f07743489db6f1058712e3db1a4ea3a44c91932ac66c5d699c71f101ea656b7d39193d86dbd0ef02fdb9a734a5768192f", 0x89}, {&(0x7f0000001840)="825a3ad177012e4adf2e8928ef744b3552a7861daea924cbace79a4943997cf846a0482ee79d46e71e6ebd2e825f66878f7879785283d1c7592eda801b5eba1f37f9ad5d486919bb8ea135713c3332d316672de8e4e62857f30832f1cb872876e8045f432ea3bbd8705ae75335a9cb4ecf4a67df808c6c1d80dba8e0d42af9d2ab222a818234a4201ec06b36c8d18b2f2024842028b796e37ff718c4", 0x9c}], 0x6, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}, @dstopts_2292={{0x78, 0x29, 0x4, {0x6, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x3, 0x51, "5c73865e19b91714cfe63cc89f0d4a854ff50bb345320b58757226d413685fc42204d4fcc9b9db24a5d99e1c1d5e00a61a7edc3d2818e8c61d83361341d6f9c77049951d8e2ac792f13874f856cdff5440"}]}}}], 0x90}}, {{&(0x7f0000001a40)={0xa, 0x4e22, 0x5, @loopback, 0x2}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001a80)="4504f8cb4b5c86147ecbb93e7db9ddfee64a95c39d27a0eea9a97e7e586db641744e6fd4862211cba6b7abf101eadc94b26e67a44f52222e3361537a609a6d4e284bc6014233d06d9a6190e1ee737eaf2d207a3e2177997be73dc7a6751e8dbcd3f82c2c2d36bacab91c67df39ba33170ffb50409816518c33910046bd29ff08635f8d6abdde7bd13f4cd4c307baec339073f1f17fb4de624fc4b729e67c643dc1b0258c34d61802120b32a7b7cda16c3efea315b48b4719f937b2", 0xbb}], 0x1, &(0x7f0000001b80)=[@rthdrdstopts={{0x30, 0x29, 0x37, {0x1, 0x2, '\x00', [@ra={0x5, 0x2, 0x673b}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0xff}, @ra={0x5, 0x2, 0xffff}, @ra={0x5, 0x2, 0x401}]}}}, @rthdrdstopts={{0x250, 0x29, 0x37, {0x87, 0x46, '\x00', [@generic={0xcf, 0x75, "3617f7c0c3e2dc41f91401bed5ba1c2e3742e041a594692d7342aa6f3697cadd97fd65a5439077c5065bb369f3df737f3d82ec3c665ee61d0fc1b92cee3b411106542d4b3bbb5396e1b947d3d97b12a27e97a521e7b81cf84d1672e9dd7c1407175ad68137a2664d730899addfa51cdb4ec4571fee"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @calipso={0x7, 0x38, {0x2, 0xc, 0x8, 0x8, [0x5, 0x8, 0x7, 0x8, 0x9, 0x4]}}, @generic={0x40, 0x4b, "4b614c6607140b1a1286744d5ce5c92ecea668ddb7ec2d0cdeddcae24e24a0e21fc2d61fc10fea8467d2f9ff45fd643b52895ee497839fa02d27ffb45775ee4acf22e0787f655ed9bc9784"}, @calipso={0x7, 0x40, {0x3, 0xe, 0x6, 0x1, [0x7, 0x400, 0x6, 0x7166, 0x7, 0xff, 0xab6]}}, @generic={0x1, 0xc0, "154d6b6113add94831ad316428099cccadb3cf58965a15668eb9802ff7c4e40cbc7c682d8e3dda75306cc0003e20fae4cc2932a2fd21f01862ce6ff1fbe0c056d88f5f3588b1e336a5c14dcd4fc559cd1cc5d5300b2daf7a46a86cd35e8dd4653d89b57bc9eae7cd063003fcbbee13e0c4b01b3a3b2fb48dfab4435d6aa8e949b12f46172a3b518a6dd8e6e2ef52d3c188a5010a2fddf55afbdc22a8700995eb1897fef95e20f123b7d827acf4a0ebca25fcf907a85df1a51067d9b5d7d07363"}, @calipso={0x7, 0x20, {0x0, 0x6, 0x7f, 0xd1, [0x0, 0x6fe, 0xfffffffffffff800]}}]}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x16, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x89}, @hao={0xc9, 0x10, @loopback}, @jumbo]}}}], 0x2b8}}], 0x3, 0x4000081)

11:28:27 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100", 0x3a, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:28:27 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="2313ba01c7e0ec80e68db8fdde27dc464153394bdf23b61cdf47641c3e4253072c0a76f94ec1441601b18396a59aecbb3ef76561d69b41466aca4ef8b837730da895eb7a5d5b3457ae4458566311c16323caefbb4d6d516ae35895507483100699126d242598fc5b0b222def533f90c78d1b79c84b8c2113dd62741c7b3596157854e1913c35a3e1a0cc7a996633a00817656ddcbd046d7dbf05cdad0de784", 0x9f}, {&(0x7f0000000240)="2cfb8f7545887ce92f8ee926c293c09f8bf1fb05343643fa22cab65c8920e1f569c382051a6f97a0865336a0472ca84968f750d59b3119450d23dee381fb0a5416d02c89cd294b146981582382dc05e5c3f6443a1cca3fa991ad63aab885f27a8a6508bc6738ce82258368b9e64082ffa311de053a6f52768f971a540ce64145efba2c6addc4c86233db89caff12298823581179f916d65ef2ac12fe2ede4e7802d818335bb69038e141207f39", 0xad}, {&(0x7f0000000300)="8d280bb304df36ee15e647cd5e7f0dff35c5d286738c01a1a181e07373677bc5238557d781fe9f9827939f244e6199653fc09e93bb8ae6c8b0d9c2cda801299efd3a46b2aedd539045032ee0370a1adcc4469565d795deab487f6b25241f0d148bd98f1d675c126ae06b4c55cbbda0b046836fb11fa2", 0x76}, {&(0x7f0000000380)="33bd23f5d75b847e7b854ddd8427c8d2e9b8e8c3e55f90ac6d8cb383e6ce8b2f1a856b5c2c545bb8b78d95970075f6bc23f3e24379983439e2d5935a36cb7f4f8434d6545820d4ad1898c5602b81de0736010849d13f201735c5dc43df3ee09d77e383e1aff0b0898dee53f1736e957788da52ff81d46f08db846f355564ea3c1b03ae9397e06709b571ae351572ea9bea5f611e5c8206775408f833ea6deeecf40e2414a0d2464b14e989a353d465bedfc4347aa071f1be72469bed", 0xbc}, {&(0x7f0000000440)="2fcc2d8bdf8c59fec7165bdfda265534c0681135da509614185b967a0a5c21ace6a9", 0x22}], 0x5, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x40, "5934abdc1d58d91978920f91c5fd0475d8376954386d2c3c15bab0282e7e51a161381c58f1db4bcd6d6971f93143ec9b383c010922b4da8156472dd21e14eaa5"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0xa8}}, {{&(0x7f00000005c0)={0xa, 0x4e22, 0x7, @local, 0x6}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000600)="d74835f11aa717680a600e5d254c047b5b647fec040781b517bc7d3d88d816cfab5c2e046697654c16a03974fff597a0c6bb3485126bcc1171d8e6039798", 0x3e}, {&(0x7f0000000640)="46a2a15c2618555a43688661fc8606491a0a55e5c100777fc74d6bb5074147a9c447a329944ad0eb40b2c4e1a2ce42ca5c692e055bd6df49b7956a5e3676e1e74aa426c6243c240e9b5a404b37932d76736e50590ace6a972774d15c8ff5db2f76e3a78355008f87f38a180ba5d3f958f93db6be18d91725ca1cabc5b44f9a051156620c29775c6d5e05820e96a5901953630bb70f1303cf488f0fef341aa46226282f", 0xa3}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="4254f478a0c00fb5df21d8483ce5670f11ec8e781c9c77f79021fdc92fbb8e09db834237d6d3da5e84b87b20d0229fb0b9bcf901c5e4a7efd3b93fddd7a1ea59297b29673ba5fd44d5b0b698ab49", 0x4e}, {&(0x7f0000001780)="576e18674d147dfc94a941a72134f2c95430fce392b86af7d7dcc049cf7306279e981fbfb8b1117fd83742960b5abe1b499626ddaebbaf772c5d40f3b90614f14e48d956ff4e372f1e347b9423bb5b93bf50262abd2a5e942f07743489db6f1058712e3db1a4ea3a44c91932ac66c5d699c71f101ea656b7d39193d86dbd0ef02fdb9a734a5768192f", 0x89}, {&(0x7f0000001840)="825a3ad177012e4adf2e8928ef744b3552a7861daea924cbace79a4943997cf846a0482ee79d46e71e6ebd2e825f66878f7879785283d1c7592eda801b5eba1f37f9ad5d486919bb8ea135713c3332d316672de8e4e62857f30832f1cb872876e8045f432ea3bbd8705ae75335a9cb4ecf4a67df808c6c1d80dba8e0d42af9d2ab222a818234a4201ec06b36c8d18b2f2024842028b796e37ff718c4", 0x9c}], 0x6, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}, @dstopts_2292={{0x78, 0x29, 0x4, {0x6, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x3, 0x51, "5c73865e19b91714cfe63cc89f0d4a854ff50bb345320b58757226d413685fc42204d4fcc9b9db24a5d99e1c1d5e00a61a7edc3d2818e8c61d83361341d6f9c77049951d8e2ac792f13874f856cdff5440"}]}}}], 0x90}}, {{&(0x7f0000001a40)={0xa, 0x4e22, 0x5, @loopback, 0x2}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001a80)="4504f8cb4b5c86147ecbb93e7db9ddfee64a95c39d27a0eea9a97e7e586db641744e6fd4862211cba6b7abf101eadc94b26e67a44f52222e3361537a609a6d4e284bc6014233d06d9a6190e1ee737eaf2d207a3e2177997be73dc7a6751e8dbcd3f82c2c2d36bacab91c67df39ba33170ffb50409816518c33910046bd29ff08635f8d6abdde7bd13f4cd4c307baec339073f1f17fb4de624fc4b729e67c643dc1b0258c34d61802120b32a7b7cda16c3efea315b48b4719f937b2", 0xbb}], 0x1, &(0x7f0000001b80)=[@rthdrdstopts={{0x30, 0x29, 0x37, {0x1, 0x2, '\x00', [@ra={0x5, 0x2, 0x673b}, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0xff}, @ra={0x5, 0x2, 0xffff}, @ra={0x5, 0x2, 0x401}]}}}, @rthdrdstopts={{0x250, 0x29, 0x37, {0x87, 0x46, '\x00', [@generic={0xcf, 0x75, "3617f7c0c3e2dc41f91401bed5ba1c2e3742e041a594692d7342aa6f3697cadd97fd65a5439077c5065bb369f3df737f3d82ec3c665ee61d0fc1b92cee3b411106542d4b3bbb5396e1b947d3d97b12a27e97a521e7b81cf84d1672e9dd7c1407175ad68137a2664d730899addfa51cdb4ec4571fee"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @calipso={0x7, 0x38, {0x2, 0xc, 0x8, 0x8, [0x5, 0x8, 0x7, 0x8, 0x9, 0x4]}}, @generic={0x40, 0x4b, "4b614c6607140b1a1286744d5ce5c92ecea668ddb7ec2d0cdeddcae24e24a0e21fc2d61fc10fea8467d2f9ff45fd643b52895ee497839fa02d27ffb45775ee4acf22e0787f655ed9bc9784"}, @calipso={0x7, 0x40, {0x3, 0xe, 0x6, 0x1, [0x7, 0x400, 0x6, 0x7166, 0x7, 0xff, 0xab6]}}, @generic={0x1, 0xc0, "154d6b6113add94831ad316428099cccadb3cf58965a15668eb9802ff7c4e40cbc7c682d8e3dda75306cc0003e20fae4cc2932a2fd21f01862ce6ff1fbe0c056d88f5f3588b1e336a5c14dcd4fc559cd1cc5d5300b2daf7a46a86cd35e8dd4653d89b57bc9eae7cd063003fcbbee13e0c4b01b3a3b2fb48dfab4435d6aa8e949b12f46172a3b518a6dd8e6e2ef52d3c188a5010a2fddf55afbdc22a8700995eb1897fef95e20f123b7d827acf4a0ebca25fcf907a85df1a51067d9b5d7d07363"}, @calipso={0x7, 0x20, {0x0, 0x6, 0x7f, 0xd1, [0x0, 0x6fe, 0xfffffffffffff800]}}]}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x16, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x89}, @hao={0xc9, 0x10, @loopback}, @jumbo]}}}], 0x2b8}}], 0x3, 0x4000081)

[ 1023.287448] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
11:28:27 executing program 6:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', 0x0, 0x0)
read(r0, &(0x7f0000000100)=""/174, 0xae)

[ 1023.333847] loop1: detected capacity change from 0 to 2048
[ 1023.338922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1023.354115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1023.358938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:28:28 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, 0x0, 0x0, 0x4000081)

[ 1023.371780] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[ 1023.400911] EXT4-fs (loop1): get root inode failed
[ 1023.401790] EXT4-fs (loop1): mount failed
11:28:28 executing program 7:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
read(r0, 0x0, 0x0)

11:28:28 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x1ff, 0x80, 0x4, 0x5}, {0x8000, 0x1, 0x8, 0x9}, {0x7, 0x3, 0xb6, 0xff}, {0x549, 0x33, 0x3, 0x4025}, {0x81, 0xc9, 0x80, 0x4e0}, {0x5, 0x5, 0xa4, 0x7e10}]})
setfsuid(0x0)

11:28:28 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setgroups(0x0, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100))
getgroups(0x4, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0])

11:28:28 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af3010004000000000000000000000001000000", 0x3c, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:28:28 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, 0x0, 0x0, 0x4000081)

[ 1023.557349] loop1: detected capacity change from 0 to 2048
[ 1023.574163] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[ 1023.584040] EXT4-fs (loop1): get root inode failed
[ 1023.584447] EXT4-fs (loop1): mount failed
[ 1025.858281] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1025.863073] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1025.867380] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1025.871985] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1025.877837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1027.892579] Bluetooth: hci6: command tx timeout
[ 1029.941135] Bluetooth: hci6: command tx timeout
[ 1031.987618] Bluetooth: hci6: command tx timeout
[ 1034.036559] Bluetooth: hci6: command tx timeout
[ 1042.223761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1042.225649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1042.310074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1042.311671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1042.600537] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1042.604676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1042.609947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:28:56 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setfsuid(0x0)

11:28:56 executing program 6:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100), 0x0)
read(r0, &(0x7f0000000100)=""/174, 0xae)

11:28:56 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, 0x0, 0x0, 0x4000081)

11:28:56 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getgid()
setgroups(0x0, 0x0)

11:28:56 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:28:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:28:56 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af3010004000000000000000000000001000000", 0x3c, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:28:56 executing program 7:
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
read(0xffffffffffffffff, 0x0, 0x0)

[ 1051.793184] loop1: detected capacity change from 0 to 2048
[ 1051.801245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1051.810576] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1051.814420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1051.817070] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[ 1051.825780] EXT4-fs (loop1): get root inode failed
[ 1051.826412] EXT4-fs (loop1): mount failed
[ 1051.828729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1051.845691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:28:56 executing program 7:
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
read(0xffffffffffffffff, 0x0, 0x0)

11:28:56 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/225, 0xe1}, {&(0x7f0000000200)=""/179, 0xb3}, {&(0x7f00000002c0)=""/250, 0xfa}, {&(0x7f00000003c0)=""/167, 0xa7}], 0x4, 0x9, 0x3908)
setgroups(0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
dup(r1)

11:28:56 executing program 5:
setfsuid(0x0)

11:28:56 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="2313ba01c7e0ec80e68db8fdde27dc464153394bdf23b61cdf47641c3e4253072c0a76f94ec1441601b18396a59aecbb3ef76561d69b41466aca4ef8b837730da895eb7a5d5b3457ae4458566311c16323caefbb4d6d516ae35895507483100699126d242598fc5b0b222def533f90c78d1b79c84b8c2113dd62741c7b3596157854e1913c35a3e1a0cc7a996633a00817656ddcbd046d7dbf05cdad0de784", 0x9f}, {&(0x7f0000000240)="2cfb8f7545887ce92f8ee926c293c09f8bf1fb05343643fa22cab65c8920e1f569c382051a6f97a0865336a0472ca84968f750d59b3119450d23dee381fb0a5416d02c89cd294b146981582382dc05e5c3f6443a1cca3fa991ad63aab885f27a8a6508bc6738ce82258368b9e64082ffa311de053a6f52768f971a540ce64145efba2c6addc4c86233db89caff12298823581179f916d65ef2ac12fe2ede4e7802d818335bb69038e141207f39", 0xad}, {&(0x7f0000000300)="8d280bb304df36ee15e647cd5e7f0dff35c5d286738c01a1a181e07373677bc5238557d781fe9f9827939f244e6199653fc09e93bb8ae6c8b0d9c2cda801299efd3a46b2aedd539045032ee0370a1adcc4469565d795deab487f6b25241f0d148bd98f1d675c126ae06b4c55cbbda0b046836fb11fa2", 0x76}, {&(0x7f0000000380)="33bd23f5d75b847e7b854ddd8427c8d2e9b8e8c3e55f90ac6d8cb383e6ce8b2f1a856b5c2c545bb8b78d95970075f6bc23f3e24379983439e2d5935a36cb7f4f8434d6545820d4ad1898c5602b81de0736010849d13f201735c5dc43df3ee09d77e383e1aff0b0898dee53f1736e957788da52ff81d46f08db846f355564ea3c1b03ae9397e06709b571ae351572ea9bea5f611e5c8206775408f833ea6deeecf40e2414a0d2464b14e989a353d465bedfc4347aa071f1be72469bed", 0xbc}, {&(0x7f0000000440)="2fcc2d8bdf8c59fec7165bdfda265534c0681135da509614185b967a0a5c21ace6a9", 0x22}], 0x5, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x40, "5934abdc1d58d91978920f91c5fd0475d8376954386d2c3c15bab0282e7e51a161381c58f1db4bcd6d6971f93143ec9b383c010922b4da8156472dd21e14eaa5"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0xa8}}, {{&(0x7f00000005c0)={0xa, 0x4e22, 0x7, @local, 0x6}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000600)="d74835f11aa717680a600e5d254c047b5b647fec040781b517bc7d3d88d816cfab5c2e046697654c16a03974fff597a0c6bb3485126bcc1171d8e6039798", 0x3e}, {&(0x7f0000000640)="46a2a15c2618555a43688661fc8606491a0a55e5c100777fc74d6bb5074147a9c447a329944ad0eb40b2c4e1a2ce42ca5c692e055bd6df49b7956a5e3676e1e74aa426c6243c240e9b5a404b37932d76736e50590ace6a972774d15c8ff5db2f76e3a78355008f87f38a180ba5d3f958f93db6be18d91725ca1cabc5b44f9a051156620c29775c6d5e05820e96a5901953630bb70f1303cf488f0fef341aa46226282f", 0xa3}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="4254f478a0c00fb5df21d8483ce5670f11ec8e781c9c77f79021fdc92fbb8e09db834237d6d3da5e84b87b20d0229fb0b9bcf901c5e4a7efd3b93fddd7a1ea59297b29673ba5fd44d5b0b698ab49", 0x4e}, {&(0x7f0000001780)="576e18674d147dfc94a941a72134f2c95430fce392b86af7d7dcc049cf7306279e981fbfb8b1117fd83742960b5abe1b499626ddaebbaf772c5d40f3b90614f14e48d956ff4e372f1e347b9423bb5b93bf50262abd2a5e942f07743489db6f1058712e3db1a4ea3a44c91932ac66c5d699c71f101ea656b7d39193d86dbd0ef02fdb9a734a5768192f", 0x89}, {&(0x7f0000001840)="825a3ad177012e4adf2e8928ef744b3552a7861daea924cbace79a4943997cf846a0482ee79d46e71e6ebd2e825f66878f7879785283d1c7592eda801b5eba1f37f9ad5d486919bb8ea135713c3332d316672de8e4e62857f30832f1cb872876e8045f432ea3bbd8705ae75335a9cb4ecf4a67df808c6c1d80dba8e0d42af9d2ab222a818234a4201ec06b36c8d18b2f2024842028b796e37ff718c4", 0x9c}], 0x6, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}, @dstopts_2292={{0x78, 0x29, 0x4, {0x6, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x3, 0x51, "5c73865e19b91714cfe63cc89f0d4a854ff50bb345320b58757226d413685fc42204d4fcc9b9db24a5d99e1c1d5e00a61a7edc3d2818e8c61d83361341d6f9c77049951d8e2ac792f13874f856cdff5440"}]}}}], 0x90}}], 0x2, 0x4000081)

11:28:56 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af3010004000000000000000000000001000000", 0x3c, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:28:56 executing program 6:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100), 0x0)
read(r0, &(0x7f0000000100)=""/174, 0xae)

11:28:56 executing program 6:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100), 0x0)
read(r0, &(0x7f0000000100)=""/174, 0xae)

[ 1052.005080] loop1: detected capacity change from 0 to 2048
[ 1052.044915] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #2: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
11:28:56 executing program 7:
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
read(0xffffffffffffffff, 0x0, 0x0)

[ 1052.052588] EXT4-fs (loop1): get root inode failed
[ 1052.053093] EXT4-fs (loop1): mount failed
11:28:56 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="2313ba01c7e0ec80e68db8fdde27dc464153394bdf23b61cdf47641c3e4253072c0a76f94ec1441601b18396a59aecbb3ef76561d69b41466aca4ef8b837730da895eb7a5d5b3457ae4458566311c16323caefbb4d6d516ae35895507483100699126d242598fc5b0b222def533f90c78d1b79c84b8c2113dd62741c7b3596157854e1913c35a3e1a0cc7a996633a00817656ddcbd046d7dbf05cdad0de784", 0x9f}, {&(0x7f0000000240)="2cfb8f7545887ce92f8ee926c293c09f8bf1fb05343643fa22cab65c8920e1f569c382051a6f97a0865336a0472ca84968f750d59b3119450d23dee381fb0a5416d02c89cd294b146981582382dc05e5c3f6443a1cca3fa991ad63aab885f27a8a6508bc6738ce82258368b9e64082ffa311de053a6f52768f971a540ce64145efba2c6addc4c86233db89caff12298823581179f916d65ef2ac12fe2ede4e7802d818335bb69038e141207f39", 0xad}, {&(0x7f0000000300)="8d280bb304df36ee15e647cd5e7f0dff35c5d286738c01a1a181e07373677bc5238557d781fe9f9827939f244e6199653fc09e93bb8ae6c8b0d9c2cda801299efd3a46b2aedd539045032ee0370a1adcc4469565d795deab487f6b25241f0d148bd98f1d675c126ae06b4c55cbbda0b046836fb11fa2", 0x76}, {&(0x7f0000000380)="33bd23f5d75b847e7b854ddd8427c8d2e9b8e8c3e55f90ac6d8cb383e6ce8b2f1a856b5c2c545bb8b78d95970075f6bc23f3e24379983439e2d5935a36cb7f4f8434d6545820d4ad1898c5602b81de0736010849d13f201735c5dc43df3ee09d77e383e1aff0b0898dee53f1736e957788da52ff81d46f08db846f355564ea3c1b03ae9397e06709b571ae351572ea9bea5f611e5c8206775408f833ea6deeecf40e2414a0d2464b14e989a353d465bedfc4347aa071f1be72469bed", 0xbc}, {&(0x7f0000000440)="2fcc2d8bdf8c59fec7165bdfda265534c0681135da509614185b967a0a5c21ace6a9", 0x22}], 0x5, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x40, "5934abdc1d58d91978920f91c5fd0475d8376954386d2c3c15bab0282e7e51a161381c58f1db4bcd6d6971f93143ec9b383c010922b4da8156472dd21e14eaa5"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0xa8}}], 0x1, 0x4000081)

11:28:56 executing program 5:
setfsuid(0x0)

11:28:56 executing program 2:
r0 = gettid()
rt_sigqueueinfo(r0, 0x0, &(0x7f0000000140))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)=ANY=[])
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
setgroups(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x9, &(0x7f00000001c0)=[{0x3f, 0x2, 0x7, 0x1d}, {0xfff8, 0x3, 0x4, 0xffff}, {0x100, 0x9, 0x39, 0xc94}, {0x2, 0xed, 0x7, 0x6}, {0x4, 0x0, 0x7, 0x80}, {0x4, 0x8, 0xd7, 0x1}, {0x800, 0xff, 0x3, 0x3f}, {0x2, 0x8, 0x9, 0x2c0}, {0x7f, 0x7f, 0x4, 0x9}]})

11:28:56 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1052.199787] loop1: detected capacity change from 0 to 2048
[ 1052.211669] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz-executor.1: iget: special inode unallocated
[ 1052.215879] EXT4-fs (loop1): get root inode failed
[ 1052.216328] EXT4-fs (loop1): mount failed
11:28:56 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:28:56 executing program 5:
setfsuid(0x0)

11:28:56 executing program 6:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
read(0xffffffffffffffff, &(0x7f0000000100)=""/174, 0xae)

11:28:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:28:56 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:28:56 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setgroups(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x9, 0x2, 0x9, 0x9}]})

[ 1052.302399] loop1: detected capacity change from 0 to 2048
[ 1052.307153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1052.317247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1052.332040] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz-executor.1: iget: special inode unallocated
[ 1052.343449] EXT4-fs (loop1): get root inode failed
[ 1052.343891] EXT4-fs (loop1): mount failed
[ 1052.372925] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1052.394064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1052.402137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:29:07 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:29:07 executing program 7:
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
read(r0, 0x0, 0x0)

11:29:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:29:07 executing program 6:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
read(0xffffffffffffffff, &(0x7f0000000100)=""/174, 0xae)

11:29:07 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="2313ba01c7e0ec80e68db8fdde27dc464153394bdf23b61cdf47641c3e4253072c0a76f94ec1441601b18396a59aecbb3ef76561d69b41466aca4ef8b837730da895eb7a5d5b3457ae4458566311c16323caefbb4d6d516ae35895507483100699126d242598fc5b0b222def533f90c78d1b79c84b8c2113dd62741c7b3596157854e1913c35a3e1a0cc7a996633a00817656ddcbd046d7dbf05cdad0de784", 0x9f}, {&(0x7f0000000240)="2cfb8f7545887ce92f8ee926c293c09f8bf1fb05343643fa22cab65c8920e1f569c382051a6f97a0865336a0472ca84968f750d59b3119450d23dee381fb0a5416d02c89cd294b146981582382dc05e5c3f6443a1cca3fa991ad63aab885f27a8a6508bc6738ce82258368b9e64082ffa311de053a6f52768f971a540ce64145efba2c6addc4c86233db89caff12298823581179f916d65ef2ac12fe2ede4e7802d818335bb69038e141207f39", 0xad}, {&(0x7f0000000300)="8d280bb304df36ee15e647cd5e7f0dff35c5d286738c01a1a181e07373677bc5238557d781fe9f9827939f244e6199653fc09e93bb8ae6c8b0d9c2cda801299efd3a46b2aedd539045032ee0370a1adcc4469565d795deab487f6b25241f0d148bd98f1d675c126ae06b4c55cbbda0b046836fb11fa2", 0x76}, {&(0x7f0000000380)="33bd23f5d75b847e7b854ddd8427c8d2e9b8e8c3e55f90ac6d8cb383e6ce8b2f1a856b5c2c545bb8b78d95970075f6bc23f3e24379983439e2d5935a36cb7f4f8434d6545820d4ad1898c5602b81de0736010849d13f201735c5dc43df3ee09d77e383e1aff0b0898dee53f1736e957788da52ff81d46f08db846f355564ea3c1b03ae9397e06709b571ae351572ea9bea5f611e5c8206775408f833ea6deeecf40e2414a0d2464b14e989a353d465bedfc4347aa071f1be72469bed", 0xbc}, {&(0x7f0000000440)="2fcc2d8bdf8c59fec7165bdfda265534c0681135da509614185b967a0a5c21ace6a9", 0x22}], 0x5, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x40, "5934abdc1d58d91978920f91c5fd0475d8376954386d2c3c15bab0282e7e51a161381c58f1db4bcd6d6971f93143ec9b383c010922b4da8156472dd21e14eaa5"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0xa8}}], 0x1, 0x4000081)

11:29:07 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
setfsuid(0x0)

11:29:07 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setgroups(0x0, 0x0)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0xc, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000))
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000280)=0x1)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100))

11:29:07 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1062.757320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1062.761282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:29:07 executing program 6:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
read(0xffffffffffffffff, &(0x7f0000000100)=""/174, 0xae)

[ 1062.778258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1062.804764] loop1: detected capacity change from 0 to 2048
[ 1062.810536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1062.842350] EXT4-fs error (device loop1): __ext4_fill_super:5500: inode #2: comm syz-executor.1: iget: special inode unallocated
[ 1062.850055] EXT4-fs (loop1): get root inode failed
[ 1062.850502] EXT4-fs (loop1): mount failed
11:29:16 executing program 6:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
read(r0, 0x0, 0x0)

11:29:16 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
setfsuid(0x0)

11:29:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:29:16 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:29:16 executing program 2:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
setgroups(0x0, 0x0)
r1 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
fcntl$dupfd(r1, 0x0, r0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0xa2050, r0, 0x71197000)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)

11:29:16 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="2313ba01c7e0ec80e68db8fdde27dc464153394bdf23b61cdf47641c3e4253072c0a76f94ec1441601b18396a59aecbb3ef76561d69b41466aca4ef8b837730da895eb7a5d5b3457ae4458566311c16323caefbb4d6d516ae35895507483100699126d242598fc5b0b222def533f90c78d1b79c84b8c2113dd62741c7b3596157854e1913c35a3e1a0cc7a996633a00817656ddcbd046d7dbf05cdad0de784", 0x9f}, {&(0x7f0000000240)="2cfb8f7545887ce92f8ee926c293c09f8bf1fb05343643fa22cab65c8920e1f569c382051a6f97a0865336a0472ca84968f750d59b3119450d23dee381fb0a5416d02c89cd294b146981582382dc05e5c3f6443a1cca3fa991ad63aab885f27a8a6508bc6738ce82258368b9e64082ffa311de053a6f52768f971a540ce64145efba2c6addc4c86233db89caff12298823581179f916d65ef2ac12fe2ede4e7802d818335bb69038e141207f39", 0xad}, {&(0x7f0000000300)="8d280bb304df36ee15e647cd5e7f0dff35c5d286738c01a1a181e07373677bc5238557d781fe9f9827939f244e6199653fc09e93bb8ae6c8b0d9c2cda801299efd3a46b2aedd539045032ee0370a1adcc4469565d795deab487f6b25241f0d148bd98f1d675c126ae06b4c55cbbda0b046836fb11fa2", 0x76}, {&(0x7f0000000380)="33bd23f5d75b847e7b854ddd8427c8d2e9b8e8c3e55f90ac6d8cb383e6ce8b2f1a856b5c2c545bb8b78d95970075f6bc23f3e24379983439e2d5935a36cb7f4f8434d6545820d4ad1898c5602b81de0736010849d13f201735c5dc43df3ee09d77e383e1aff0b0898dee53f1736e957788da52ff81d46f08db846f355564ea3c1b03ae9397e06709b571ae351572ea9bea5f611e5c8206775408f833ea6deeecf40e2414a0d2464b14e989a353d465bedfc4347aa071f1be72469bed", 0xbc}, {&(0x7f0000000440)="2fcc2d8bdf8c59fec7165bdfda265534c0681135da509614185b967a0a5c21ace6a9", 0x22}], 0x5, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x40, "5934abdc1d58d91978920f91c5fd0475d8376954386d2c3c15bab0282e7e51a161381c58f1db4bcd6d6971f93143ec9b383c010922b4da8156472dd21e14eaa5"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0xa8}}], 0x1, 0x4000081)

11:29:16 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800030000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000091d325d6000000000000000000000000000000000000000000000000ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001008000000000000800010000000af30100040000000000000000000000010000006000000000000000000000000000000000000000000000000000000000000000000000000000000057bbaa66000000000000000000000000000000000000000000000000ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3736383832343338342f66696c65302f66696c653000000000000000000000000000000000000000000000596e6dde000000000000000000000000000000000000000000000000ed8100000a000000d5f4655fd5f4655fd5f4655f00000000000001000001000000000800010000000af301000400000000000000000000000100000070", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:29:16 executing program 7:
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
read(r0, 0x0, 0x0)

[ 1071.988438] loop1: detected capacity change from 0 to 2048
[ 1072.006429] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1072.007791] EXT4-fs (loop1): group descriptors corrupted!
11:29:16 executing program 7:
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
read(r0, 0x0, 0x0)

[ 1072.053562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1072.056002] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
11:29:16 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="2313ba01c7e0ec80e68db8fdde27dc464153394bdf23b61cdf47641c3e4253072c0a76f94ec1441601b18396a59aecbb3ef76561d69b41466aca4ef8b837730da895eb7a5d5b3457ae4458566311c16323caefbb4d6d516ae35895507483100699126d242598fc5b0b222def533f90c78d1b79c84b8c2113dd62741c7b3596157854e1913c35a3e1a0cc7a996633a00817656ddcbd046d7dbf05cdad0de784", 0x9f}, {&(0x7f0000000240)="2cfb8f7545887ce92f8ee926c293c09f8bf1fb05343643fa22cab65c8920e1f569c382051a6f97a0865336a0472ca84968f750d59b3119450d23dee381fb0a5416d02c89cd294b146981582382dc05e5c3f6443a1cca3fa991ad63aab885f27a8a6508bc6738ce82258368b9e64082ffa311de053a6f52768f971a540ce64145efba2c6addc4c86233db89caff12298823581179f916d65ef2ac12fe2ede4e7802d818335bb69038e141207f39", 0xad}, {&(0x7f0000000300)="8d280bb304df36ee15e647cd5e7f0dff35c5d286738c01a1a181e07373677bc5238557d781fe9f9827939f244e6199653fc09e93bb8ae6c8b0d9c2cda801299efd3a46b2aedd539045032ee0370a1adcc4469565d795deab487f6b25241f0d148bd98f1d675c126ae06b4c55cbbda0b046836fb11fa2", 0x76}, {&(0x7f0000000380)="33bd23f5d75b847e7b854ddd8427c8d2e9b8e8c3e55f90ac6d8cb383e6ce8b2f1a856b5c2c545bb8b78d95970075f6bc23f3e24379983439e2d5935a36cb7f4f8434d6545820d4ad1898c5602b81de0736010849d13f201735c5dc43df3ee09d77e383e1aff0b0898dee53f1736e957788da52ff81d46f08db846f355564ea3c1b03ae9397e06709b571ae351572ea9bea5f611e5c8206775408f833ea6deeecf40e2414a0d2464b14e989a353d465bedfc4347aa071f1be72469bed", 0xbc}, {&(0x7f0000000440)="2fcc2d8bdf8c59fec7165bdfda265534c0681135da509614185b967a0a5c21ace6a9", 0x22}], 0x5, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x40, "5934abdc1d58d91978920f91c5fd0475d8376954386d2c3c15bab0282e7e51a161381c58f1db4bcd6d6971f93143ec9b383c010922b4da8156472dd21e14eaa5"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000600)="d74835f11aa717680a600e5d254c047b5b647fec040781b517bc7d3d88d816cfab5c2e046697654c16a03974fff597a0c6bb3485126bcc1171d8e6039798", 0x3e}, {&(0x7f0000000640)="46a2a15c2618555a43688661fc8606491a0a55e5c100777fc74d6bb5074147a9c447a329944ad0eb40b2c4e1a2ce42ca5c692e055bd6df49b7956a5e3676e1e74aa426c6243c240e9b5a404b37932d76736e50590ace6a972774d15c8ff5db2f76e3a78355008f87f38a180ba5d3f958f93db6be18d91725ca1cabc5b44f9a051156620c29775c6d5e05820e96a5901953630bb70f1303cf488f0fef341aa46226282f", 0xa3}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="4254f478a0c00fb5df21d8483ce5670f11ec8e781c9c77f79021fdc92fbb8e09db834237d6d3da5e84b87b20d0229fb0b9bcf901c5e4a7efd3b93fddd7a1ea59297b29673ba5fd44d5b0b698ab49", 0x4e}, {&(0x7f0000001780)="576e18674d147dfc94a941a72134f2c95430fce392b86af7d7dcc049cf7306279e981fbfb8b1117fd83742960b5abe1b499626ddaebbaf772c5d40f3b90614f14e48d956ff4e372f1e347b9423bb5b93bf50262abd2a5e942f07743489db6f1058712e3db1a4ea3a44c91932ac66c5d699c71f101ea656b7d39193d86dbd0ef02fdb9a734a5768192f", 0x89}, {&(0x7f0000001840)="825a3ad177012e4adf2e8928ef744b3552a7861daea924cbace79a4943997cf846a0482ee79d46e71e6ebd2e825f66878f7879785283d1c7592eda801b5eba1f37f9ad5d486919bb8ea135713c3332d316672de8e4e62857f30832f1cb872876e8045f432ea3bbd8705ae75335a9cb4ecf4a67df808c6c1d80dba8e0d42af9d2ab222a818234a4201ec06b36c8d18b2f2024842028b796e37ff718c4", 0x9c}], 0x6, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}, @dstopts_2292={{0x78, 0x29, 0x4, {0x6, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x3, 0x51, "5c73865e19b91714cfe63cc89f0d4a854ff50bb345320b58757226d413685fc42204d4fcc9b9db24a5d99e1c1d5e00a61a7edc3d2818e8c61d83361341d6f9c77049951d8e2ac792f13874f856cdff5440"}]}}}], 0x90}}], 0x2, 0x4000081)

[ 1072.070524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1072.071342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1072.095961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:29:16 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
setfsuid(0x0)

11:29:16 executing program 6:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
read(r0, 0x0, 0x0)

11:29:16 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:29:16 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setgroups(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x7a07eb84a8499159, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x1, 0x1f, 0xe0, 0x35a}, {0xdf83, 0x40, 0x2, 0x7}]})

[ 1072.193457] loop1: detected capacity change from 0 to 2048
11:29:16 executing program 7:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
read(r0, 0x0, 0x0)

[ 1072.211982] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1072.213310] EXT4-fs (loop1): group descriptors corrupted!
11:29:16 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="2313ba01c7e0ec80e68db8fdde27dc464153394bdf23b61cdf47641c3e4253072c0a76f94ec1441601b18396a59aecbb3ef76561d69b41466aca4ef8b837730da895eb7a5d5b3457ae4458566311c16323caefbb4d6d516ae35895507483100699126d242598fc5b0b222def533f90c78d1b79c84b8c2113dd62741c7b3596157854e1913c35a3e1a0cc7a996633a00817656ddcbd046d7dbf05cdad0de784", 0x9f}, {&(0x7f0000000240)="2cfb8f7545887ce92f8ee926c293c09f8bf1fb05343643fa22cab65c8920e1f569c382051a6f97a0865336a0472ca84968f750d59b3119450d23dee381fb0a5416d02c89cd294b146981582382dc05e5c3f6443a1cca3fa991ad63aab885f27a8a6508bc6738ce82258368b9e64082ffa311de053a6f52768f971a540ce64145efba2c6addc4c86233db89caff12298823581179f916d65ef2ac12fe2ede4e7802d818335bb69038e141207f39", 0xad}, {&(0x7f0000000300)="8d280bb304df36ee15e647cd5e7f0dff35c5d286738c01a1a181e07373677bc5238557d781fe9f9827939f244e6199653fc09e93bb8ae6c8b0d9c2cda801299efd3a46b2aedd539045032ee0370a1adcc4469565d795deab487f6b25241f0d148bd98f1d675c126ae06b4c55cbbda0b046836fb11fa2", 0x76}, {&(0x7f0000000380)="33bd23f5d75b847e7b854ddd8427c8d2e9b8e8c3e55f90ac6d8cb383e6ce8b2f1a856b5c2c545bb8b78d95970075f6bc23f3e24379983439e2d5935a36cb7f4f8434d6545820d4ad1898c5602b81de0736010849d13f201735c5dc43df3ee09d77e383e1aff0b0898dee53f1736e957788da52ff81d46f08db846f355564ea3c1b03ae9397e06709b571ae351572ea9bea5f611e5c8206775408f833ea6deeecf40e2414a0d2464b14e989a353d465bedfc4347aa071f1be72469bed", 0xbc}, {&(0x7f0000000440)="2fcc2d8bdf8c59fec7165bdfda265534c0681135da509614185b967a0a5c21ace6a9", 0x22}], 0x5, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x40, "5934abdc1d58d91978920f91c5fd0475d8376954386d2c3c15bab0282e7e51a161381c58f1db4bcd6d6971f93143ec9b383c010922b4da8156472dd21e14eaa5"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0xa8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}, @dstopts_2292={{0x78, 0x29, 0x4, {0x6, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x3, 0x51, "5c73865e19b91714cfe63cc89f0d4a854ff50bb345320b58757226d413685fc42204d4fcc9b9db24a5d99e1c1d5e00a61a7edc3d2818e8c61d83361341d6f9c77049951d8e2ac792f13874f856cdff5440"}]}}}], 0x90}}], 0x2, 0x4000081)

11:29:16 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
setfsuid(0x0)

11:29:16 executing program 6:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
read(r0, 0x0, 0x0)

11:29:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:29:25 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:29:25 executing program 7:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
read(r0, 0x0, 0x0)

11:29:25 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{0x56d, 0x0, 0x3, 0x6}, {0xfff, 0x1, 0x6, 0x9}, {0x8001, 0xff, 0x3f, 0xff}, {0x1, 0x68, 0x0, 0x6}, {0x9, 0xe, 0x6, 0x5}, {0x9, 0x3f, 0xfb, 0x9}, {0x0, 0x67, 0x7, 0x101}]})
setgroups(0x0, 0x0)

11:29:25 executing program 6:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
read(r0, &(0x7f0000000100)=""/174, 0xae)

11:29:25 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="2313ba01c7e0ec80e68db8fdde27dc464153394bdf23b61cdf47641c3e4253072c0a76f94ec1441601b18396a59aecbb3ef76561d69b41466aca4ef8b837730da895eb7a5d5b3457ae4458566311c16323caefbb4d6d516ae35895507483100699126d242598fc5b0b222def533f90c78d1b79c84b8c2113dd62741c7b3596157854e1913c35a3e1a0cc7a996633a00817656ddcbd046d7dbf05cdad0de784", 0x9f}, {&(0x7f0000000240)="2cfb8f7545887ce92f8ee926c293c09f8bf1fb05343643fa22cab65c8920e1f569c382051a6f97a0865336a0472ca84968f750d59b3119450d23dee381fb0a5416d02c89cd294b146981582382dc05e5c3f6443a1cca3fa991ad63aab885f27a8a6508bc6738ce82258368b9e64082ffa311de053a6f52768f971a540ce64145efba2c6addc4c86233db89caff12298823581179f916d65ef2ac12fe2ede4e7802d818335bb69038e141207f39", 0xad}, {&(0x7f0000000300)="8d280bb304df36ee15e647cd5e7f0dff35c5d286738c01a1a181e07373677bc5238557d781fe9f9827939f244e6199653fc09e93bb8ae6c8b0d9c2cda801299efd3a46b2aedd539045032ee0370a1adcc4469565d795deab487f6b25241f0d148bd98f1d675c126ae06b4c55cbbda0b046836fb11fa2", 0x76}, {&(0x7f0000000380)="33bd23f5d75b847e7b854ddd8427c8d2e9b8e8c3e55f90ac6d8cb383e6ce8b2f1a856b5c2c545bb8b78d95970075f6bc23f3e24379983439e2d5935a36cb7f4f8434d6545820d4ad1898c5602b81de0736010849d13f201735c5dc43df3ee09d77e383e1aff0b0898dee53f1736e957788da52ff81d46f08db846f355564ea3c1b03ae9397e06709b571ae351572ea9bea5f611e5c8206775408f833ea6deeecf40e2414a0d2464b14e989a353d465bedfc4347aa071f1be72469bed", 0xbc}, {&(0x7f0000000440)="2fcc2d8bdf8c59fec7165bdfda265534c0681135da509614185b967a0a5c21ace6a9", 0x22}], 0x5, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x40, "5934abdc1d58d91978920f91c5fd0475d8376954386d2c3c15bab0282e7e51a161381c58f1db4bcd6d6971f93143ec9b383c010922b4da8156472dd21e14eaa5"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0xa8}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000081)

11:29:25 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
setfsuid(0x0)

11:29:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

[ 1080.910032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1080.910952] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1080.916423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1080.919319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1080.922850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:29:25 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x1, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0x8, &(0x7f0000000000)=[{0x4, 0x7, 0x3, 0x1}, {0x9, 0x6, 0x80, 0x1000}, {0x5, 0xe0, 0x40, 0x200005}, {0x7f, 0x1, 0x5, 0x80000000}, {0x8b, 0xd4, 0x85, 0x4}, {0x3ff, 0x7, 0x3, 0x1000}, {0x3, 0x3f, 0x4, 0x200}, {0x5, 0xf2, 0x7, 0x6}]})
prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0xfff, 0x80, 0x0, 0x4}, {0x800, 0xea, 0x5, 0x37}]})
process_mrelease(0xffffffffffffffff, 0x0)
setgroups(0x0, 0x0)

[ 1080.962020] loop1: detected capacity change from 0 to 2048
11:29:25 executing program 7:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
read(r0, 0x0, 0x0)

11:29:25 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="2313ba01c7e0ec80e68db8fdde27dc464153394bdf23b61cdf47641c3e4253072c0a76f94ec1441601b18396a59aecbb3ef76561d69b41466aca4ef8b837730da895eb7a5d5b3457ae4458566311c16323caefbb4d6d516ae35895507483100699126d242598fc5b0b222def533f90c78d1b79c84b8c2113dd62741c7b3596157854e1913c35a3e1a0cc7a996633a00817656ddcbd046d7dbf05cdad0de784", 0x9f}, {&(0x7f0000000240)="2cfb8f7545887ce92f8ee926c293c09f8bf1fb05343643fa22cab65c8920e1f569c382051a6f97a0865336a0472ca84968f750d59b3119450d23dee381fb0a5416d02c89cd294b146981582382dc05e5c3f6443a1cca3fa991ad63aab885f27a8a6508bc6738ce82258368b9e64082ffa311de053a6f52768f971a540ce64145efba2c6addc4c86233db89caff12298823581179f916d65ef2ac12fe2ede4e7802d818335bb69038e141207f39", 0xad}, {&(0x7f0000000300)="8d280bb304df36ee15e647cd5e7f0dff35c5d286738c01a1a181e07373677bc5238557d781fe9f9827939f244e6199653fc09e93bb8ae6c8b0d9c2cda801299efd3a46b2aedd539045032ee0370a1adcc4469565d795deab487f6b25241f0d148bd98f1d675c126ae06b4c55cbbda0b046836fb11fa2", 0x76}, {&(0x7f0000000380)="33bd23f5d75b847e7b854ddd8427c8d2e9b8e8c3e55f90ac6d8cb383e6ce8b2f1a856b5c2c545bb8b78d95970075f6bc23f3e24379983439e2d5935a36cb7f4f8434d6545820d4ad1898c5602b81de0736010849d13f201735c5dc43df3ee09d77e383e1aff0b0898dee53f1736e957788da52ff81d46f08db846f355564ea3c1b03ae9397e06709b571ae351572ea9bea5f611e5c8206775408f833ea6deeecf40e2414a0d2464b14e989a353d465bedfc4347aa071f1be72469bed", 0xbc}, {&(0x7f0000000440)="2fcc2d8bdf8c59fec7165bdfda265534c0681135da509614185b967a0a5c21ace6a9", 0x22}], 0x5, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x40, "5934abdc1d58d91978920f91c5fd0475d8376954386d2c3c15bab0282e7e51a161381c58f1db4bcd6d6971f93143ec9b383c010922b4da8156472dd21e14eaa5"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0xa8}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000081)

[ 1080.990349] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1080.991970] EXT4-fs (loop1): group descriptors corrupted!
11:29:25 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x7, 0xe1, 0x76, 0x1f}]})
setgroups(0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r0=>0x0}, &(0x7f0000000080)=0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r2=>0x0}, &(0x7f0000008600)=0xc)
setregid(r2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000140)=0xc)
getgroups(0x6, &(0x7f0000000180)=[r0, 0xffffffffffffffff, 0xee00, r2, r3, r2])

11:29:25 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
setfsuid(0x0)

11:29:25 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x1, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0x8, &(0x7f0000000000)=[{0x4, 0x7, 0x3, 0x1}, {0x9, 0x6, 0x80, 0x1000}, {0x5, 0xe0, 0x40, 0x200005}, {0x7f, 0x1, 0x5, 0x80000000}, {0x8b, 0xd4, 0x85, 0x4}, {0x3ff, 0x7, 0x3, 0x1000}, {0x3, 0x3f, 0x4, 0x200}, {0x5, 0xf2, 0x7, 0x6}]})
prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0xfff, 0x80, 0x0, 0x4}, {0x800, 0xea, 0x5, 0x37}]})
process_mrelease(0xffffffffffffffff, 0x0)
setgroups(0x0, 0x0)

11:29:25 executing program 7:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, &(0x7f0000000100)="ad", 0x1)
read(r0, 0x0, 0x0)

11:29:25 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {0x0, 0x0, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800030000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000091d325d6000000000000000000000000000000000000000000000000ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001008000000000000800010000000af30100040000000000000000000000010000006000000000000000000000000000000000000000000000000000000000000000000000000000000057bbaa66000000000000000000000000000000000000000000000000ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3736383832343338342f66696c65302f66696c653000000000000000000000000000000000000000000000596e6dde000000000000000000000000000000000000000000000000ed8100000a000000d5f4655fd5f4655fd5f4655f00000000000001000001000000000800010000000af301000400000000000000000000000100000070", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1081.182283] loop1: detected capacity change from 0 to 2048
[ 1081.212326] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1081.213761] EXT4-fs (loop1): group descriptors corrupted!
11:29:34 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {0x0, 0x0, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:29:34 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:29:34 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0xfffc, 0xd, 0x9, 0xe0}]})
setgroups(0x0, 0x0)

11:29:34 executing program 7:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, &(0x7f0000000100)="ad", 0x1)
read(r0, 0x0, 0x0)

11:29:34 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:29:34 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
setfsuid(0x0)

11:29:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:29:34 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="2313ba01c7e0ec80e68db8fdde27dc464153394bdf23b61cdf47641c3e4253072c0a76f94ec1441601b18396a59aecbb3ef76561d69b41466aca4ef8b837730da895eb7a5d5b3457ae4458566311c16323caefbb4d6d516ae35895507483100699126d242598fc5b0b222def533f90c78d1b79c84b8c2113dd62741c7b3596157854e1913c35a3e1a0cc7a996633a00817656ddcbd046d7dbf05cdad0de784", 0x9f}, {&(0x7f0000000240)="2cfb8f7545887ce92f8ee926c293c09f8bf1fb05343643fa22cab65c8920e1f569c382051a6f97a0865336a0472ca84968f750d59b3119450d23dee381fb0a5416d02c89cd294b146981582382dc05e5c3f6443a1cca3fa991ad63aab885f27a8a6508bc6738ce82258368b9e64082ffa311de053a6f52768f971a540ce64145efba2c6addc4c86233db89caff12298823581179f916d65ef2ac12fe2ede4e7802d818335bb69038e141207f39", 0xad}, {&(0x7f0000000300)="8d280bb304df36ee15e647cd5e7f0dff35c5d286738c01a1a181e07373677bc5238557d781fe9f9827939f244e6199653fc09e93bb8ae6c8b0d9c2cda801299efd3a46b2aedd539045032ee0370a1adcc4469565d795deab487f6b25241f0d148bd98f1d675c126ae06b4c55cbbda0b046836fb11fa2", 0x76}, {&(0x7f0000000380)="33bd23f5d75b847e7b854ddd8427c8d2e9b8e8c3e55f90ac6d8cb383e6ce8b2f1a856b5c2c545bb8b78d95970075f6bc23f3e24379983439e2d5935a36cb7f4f8434d6545820d4ad1898c5602b81de0736010849d13f201735c5dc43df3ee09d77e383e1aff0b0898dee53f1736e957788da52ff81d46f08db846f355564ea3c1b03ae9397e06709b571ae351572ea9bea5f611e5c8206775408f833ea6deeecf40e2414a0d2464b14e989a353d465bedfc4347aa071f1be72469bed", 0xbc}, {&(0x7f0000000440)="2fcc2d8bdf8c59fec7165bdfda265534c0681135da509614185b967a0a5c21ace6a9", 0x22}], 0x5, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x40, "5934abdc1d58d91978920f91c5fd0475d8376954386d2c3c15bab0282e7e51a161381c58f1db4bcd6d6971f93143ec9b383c010922b4da8156472dd21e14eaa5"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0xa8}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000081)

[ 1089.425419] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1089.429236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1089.431921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1089.436649] loop1: detected capacity change from 0 to 2048
[ 1089.438129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1089.440931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1089.459394] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1089.466103] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1089.466963] EXT4-fs (loop1): group descriptors corrupted!
11:29:34 executing program 7:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, &(0x7f0000000100)="ad", 0x1)
read(r0, 0x0, 0x0)

11:29:34 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0))
setgroups(0x0, 0x0)

[ 1089.479427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1089.501043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:29:34 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
setfsuid(0x0)

11:29:34 executing program 7:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', 0x0, 0x0)
read(r0, 0x0, 0x0)

11:29:34 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="2313ba01c7e0ec80e68db8fdde27dc464153394bdf23b61cdf47641c3e4253072c0a76f94ec1441601b18396a59aecbb3ef76561d69b41466aca4ef8b837730da895eb7a5d5b3457ae4458566311c16323caefbb4d6d516ae35895507483100699126d242598fc5b0b222def533f90c78d1b79c84b8c2113dd62741c7b3596157854e1913c35a3e1a0cc7a996633a00817656ddcbd046d7dbf05cdad0de784", 0x9f}, {&(0x7f0000000240)="2cfb8f7545887ce92f8ee926c293c09f8bf1fb05343643fa22cab65c8920e1f569c382051a6f97a0865336a0472ca84968f750d59b3119450d23dee381fb0a5416d02c89cd294b146981582382dc05e5c3f6443a1cca3fa991ad63aab885f27a8a6508bc6738ce82258368b9e64082ffa311de053a6f52768f971a540ce64145efba2c6addc4c86233db89caff12298823581179f916d65ef2ac12fe2ede4e7802d818335bb69038e141207f39", 0xad}, {&(0x7f0000000300)="8d280bb304df36ee15e647cd5e7f0dff35c5d286738c01a1a181e07373677bc5238557d781fe9f9827939f244e6199653fc09e93bb8ae6c8b0d9c2cda801299efd3a46b2aedd539045032ee0370a1adcc4469565d795deab487f6b25241f0d148bd98f1d675c126ae06b4c55cbbda0b046836fb11fa2", 0x76}, {&(0x7f0000000380)="33bd23f5d75b847e7b854ddd8427c8d2e9b8e8c3e55f90ac6d8cb383e6ce8b2f1a856b5c2c545bb8b78d95970075f6bc23f3e24379983439e2d5935a36cb7f4f8434d6545820d4ad1898c5602b81de0736010849d13f201735c5dc43df3ee09d77e383e1aff0b0898dee53f1736e957788da52ff81d46f08db846f355564ea3c1b03ae9397e06709b571ae351572ea9bea5f611e5c8206775408f833ea6deeecf40e2414a0d2464b14e989a353d465bedfc4347aa071f1be72469bed", 0xbc}, {&(0x7f0000000440)="2fcc2d8bdf8c59fec7165bdfda265534c0681135da509614185b967a0a5c21ace6a9", 0x22}], 0x5, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x40, "5934abdc1d58d91978920f91c5fd0475d8376954386d2c3c15bab0282e7e51a161381c58f1db4bcd6d6971f93143ec9b383c010922b4da8156472dd21e14eaa5"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0xa8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x4000081)

11:29:34 executing program 2:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4800)
close(r1)
setgroups(0x0, 0x0)
r3 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
close(r3)
r4 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r5=>r0, {0xfffffe00}}, './file0\x00'})
fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000080)='%\'$),\\.\x00', 0x0, r5)

11:29:34 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {0x0, 0x0, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:29:34 executing program 7:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', 0x0, 0x0)
read(r0, 0x0, 0x0)

[ 1089.666689] loop1: detected capacity change from 0 to 2048
[ 1089.679238] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1089.680714] EXT4-fs (loop1): group descriptors corrupted!
11:29:43 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
setfsuid(0x0)

11:29:43 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:29:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:29:44 executing program 7:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', 0x0, 0x0)
read(r0, 0x0, 0x0)

11:29:44 executing program 2:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setgroups(0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, <r1=>0xee01}}, './file0\x00'})
socket$nl_xfrm(0x10, 0x3, 0x6)
setregid(0x0, 0x0)
getgroups(0x5, &(0x7f0000000080)=[0x0, 0xee00, 0xee01, r1, 0x0])

11:29:44 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="2313ba01c7e0ec80e68db8fdde27dc464153394bdf23b61cdf47641c3e4253072c0a76f94ec1441601b18396a59aecbb3ef76561d69b41466aca4ef8b837730da895eb7a5d5b3457ae4458566311c16323caefbb4d6d516ae35895507483100699126d242598fc5b0b222def533f90c78d1b79c84b8c2113dd62741c7b3596157854e1913c35a3e1a0cc7a996633a00817656ddcbd046d7dbf05cdad0de784", 0x9f}, {&(0x7f0000000240)="2cfb8f7545887ce92f8ee926c293c09f8bf1fb05343643fa22cab65c8920e1f569c382051a6f97a0865336a0472ca84968f750d59b3119450d23dee381fb0a5416d02c89cd294b146981582382dc05e5c3f6443a1cca3fa991ad63aab885f27a8a6508bc6738ce82258368b9e64082ffa311de053a6f52768f971a540ce64145efba2c6addc4c86233db89caff12298823581179f916d65ef2ac12fe2ede4e7802d818335bb69038e141207f39", 0xad}, {&(0x7f0000000300)="8d280bb304df36ee15e647cd5e7f0dff35c5d286738c01a1a181e07373677bc5238557d781fe9f9827939f244e6199653fc09e93bb8ae6c8b0d9c2cda801299efd3a46b2aedd539045032ee0370a1adcc4469565d795deab487f6b25241f0d148bd98f1d675c126ae06b4c55cbbda0b046836fb11fa2", 0x76}, {&(0x7f0000000380)="33bd23f5d75b847e7b854ddd8427c8d2e9b8e8c3e55f90ac6d8cb383e6ce8b2f1a856b5c2c545bb8b78d95970075f6bc23f3e24379983439e2d5935a36cb7f4f8434d6545820d4ad1898c5602b81de0736010849d13f201735c5dc43df3ee09d77e383e1aff0b0898dee53f1736e957788da52ff81d46f08db846f355564ea3c1b03ae9397e06709b571ae351572ea9bea5f611e5c8206775408f833ea6deeecf40e2414a0d2464b14e989a353d465bedfc4347aa071f1be72469bed", 0xbc}, {&(0x7f0000000440)="2fcc2d8bdf8c59fec7165bdfda265534c0681135da509614185b967a0a5c21ace6a9", 0x22}], 0x5, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x40, "5934abdc1d58d91978920f91c5fd0475d8376954386d2c3c15bab0282e7e51a161381c58f1db4bcd6d6971f93143ec9b383c010922b4da8156472dd21e14eaa5"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0xa8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)}}], 0x2, 0x4000081)

11:29:44 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:29:44 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300), 0x0, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1099.358728] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1099.362414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1099.366012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1099.389072] loop1: detected capacity change from 0 to 2048
[ 1099.402955] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1099.403727] EXT4-fs (loop1): group descriptors corrupted!
[ 1099.404377] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1099.413083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1099.414258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1099.423867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1099.425834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:29:44 executing program 7:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100), 0x0)
read(r0, 0x0, 0x0)

11:29:44 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]})
setfsuid(0x0)

11:29:44 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="2313ba01c7e0ec80e68db8fdde27dc464153394bdf23b61cdf47641c3e4253072c0a76f94ec1441601b18396a59aecbb3ef76561d69b41466aca4ef8b837730da895eb7a5d5b3457ae4458566311c16323caefbb4d6d516ae35895507483100699126d242598fc5b0b222def533f90c78d1b79c84b8c2113dd62741c7b3596157854e1913c35a3e1a0cc7a996633a00817656ddcbd046d7dbf05cdad0de784", 0x9f}, {&(0x7f0000000240)="2cfb8f7545887ce92f8ee926c293c09f8bf1fb05343643fa22cab65c8920e1f569c382051a6f97a0865336a0472ca84968f750d59b3119450d23dee381fb0a5416d02c89cd294b146981582382dc05e5c3f6443a1cca3fa991ad63aab885f27a8a6508bc6738ce82258368b9e64082ffa311de053a6f52768f971a540ce64145efba2c6addc4c86233db89caff12298823581179f916d65ef2ac12fe2ede4e7802d818335bb69038e141207f39", 0xad}, {&(0x7f0000000300)="8d280bb304df36ee15e647cd5e7f0dff35c5d286738c01a1a181e07373677bc5238557d781fe9f9827939f244e6199653fc09e93bb8ae6c8b0d9c2cda801299efd3a46b2aedd539045032ee0370a1adcc4469565d795deab487f6b25241f0d148bd98f1d675c126ae06b4c55cbbda0b046836fb11fa2", 0x76}, {&(0x7f0000000380)="33bd23f5d75b847e7b854ddd8427c8d2e9b8e8c3e55f90ac6d8cb383e6ce8b2f1a856b5c2c545bb8b78d95970075f6bc23f3e24379983439e2d5935a36cb7f4f8434d6545820d4ad1898c5602b81de0736010849d13f201735c5dc43df3ee09d77e383e1aff0b0898dee53f1736e957788da52ff81d46f08db846f355564ea3c1b03ae9397e06709b571ae351572ea9bea5f611e5c8206775408f833ea6deeecf40e2414a0d2464b14e989a353d465bedfc4347aa071f1be72469bed", 0xbc}, {&(0x7f0000000440)="2fcc2d8bdf8c59fec7165bdfda265534c0681135da509614185b967a0a5c21ace6a9", 0x22}], 0x5, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x40, "5934abdc1d58d91978920f91c5fd0475d8376954386d2c3c15bab0282e7e51a161381c58f1db4bcd6d6971f93143ec9b383c010922b4da8156472dd21e14eaa5"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0xa8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)}}], 0x2, 0x4000081)

11:29:44 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300), 0x0, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:29:44 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
flock(0xffffffffffffffff, 0xa)
setgroups(0x0, 0x0)

[ 1099.520631] loop1: detected capacity change from 0 to 2048
[ 1099.525537] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1099.526285] EXT4-fs (loop1): group descriptors corrupted!
11:29:44 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]})
setfsuid(0x0)

11:29:44 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300), 0x0, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1099.639364] loop1: detected capacity change from 0 to 2048
[ 1099.646409] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1099.647839] EXT4-fs (loop1): group descriptors corrupted!
11:29:54 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:29:54 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="2313ba01c7e0ec80e68db8fdde27dc464153394bdf23b61cdf47641c3e4253072c0a76f94ec1441601b18396a59aecbb3ef76561d69b41466aca4ef8b837730da895eb7a5d5b3457ae4458566311c16323caefbb4d6d516ae35895507483100699126d242598fc5b0b222def533f90c78d1b79c84b8c2113dd62741c7b3596157854e1913c35a3e1a0cc7a996633a00817656ddcbd046d7dbf05cdad0de784", 0x9f}, {&(0x7f0000000240)="2cfb8f7545887ce92f8ee926c293c09f8bf1fb05343643fa22cab65c8920e1f569c382051a6f97a0865336a0472ca84968f750d59b3119450d23dee381fb0a5416d02c89cd294b146981582382dc05e5c3f6443a1cca3fa991ad63aab885f27a8a6508bc6738ce82258368b9e64082ffa311de053a6f52768f971a540ce64145efba2c6addc4c86233db89caff12298823581179f916d65ef2ac12fe2ede4e7802d818335bb69038e141207f39", 0xad}, {&(0x7f0000000300)="8d280bb304df36ee15e647cd5e7f0dff35c5d286738c01a1a181e07373677bc5238557d781fe9f9827939f244e6199653fc09e93bb8ae6c8b0d9c2cda801299efd3a46b2aedd539045032ee0370a1adcc4469565d795deab487f6b25241f0d148bd98f1d675c126ae06b4c55cbbda0b046836fb11fa2", 0x76}, {&(0x7f0000000380)="33bd23f5d75b847e7b854ddd8427c8d2e9b8e8c3e55f90ac6d8cb383e6ce8b2f1a856b5c2c545bb8b78d95970075f6bc23f3e24379983439e2d5935a36cb7f4f8434d6545820d4ad1898c5602b81de0736010849d13f201735c5dc43df3ee09d77e383e1aff0b0898dee53f1736e957788da52ff81d46f08db846f355564ea3c1b03ae9397e06709b571ae351572ea9bea5f611e5c8206775408f833ea6deeecf40e2414a0d2464b14e989a353d465bedfc4347aa071f1be72469bed", 0xbc}, {&(0x7f0000000440)="2fcc2d8bdf8c59fec7165bdfda265534c0681135da509614185b967a0a5c21ace6a9", 0x22}], 0x5, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x40, "5934abdc1d58d91978920f91c5fd0475d8376954386d2c3c15bab0282e7e51a161381c58f1db4bcd6d6971f93143ec9b383c010922b4da8156472dd21e14eaa5"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0xa8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)}}], 0x2, 0x4000081)

11:29:54 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]})
setfsuid(0x0)

11:29:54 executing program 7:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100), 0x0)
read(r0, 0x0, 0x0)

11:29:54 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setgroups(0x0, 0x0)
r0 = getegid()
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r2=>0x0}, &(0x7f0000008600)=0xc)
setregid(r2, 0x0)
getgroups(0x5, &(0x7f0000000000)=[0xffffffffffffffff, 0xee01, r0, r2, 0xffffffffffffffff])

11:29:54 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="0200000003", 0x5, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:29:54 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:29:54 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

[ 1110.108547] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1110.115753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1110.122775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:29:54 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]})
setfsuid(0x0)

[ 1110.151721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1110.159885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1110.172770] loop1: detected capacity change from 0 to 2048
[ 1110.181965] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.6'.
[ 1110.184315] audit: type=1326 audit(1751196594.843:71): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13943 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec42a85b19 code=0x0
11:29:54 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="2313ba01c7e0ec80e68db8fdde27dc464153394bdf23b61cdf47641c3e4253072c0a76f94ec1441601b18396a59aecbb3ef76561d69b41466aca4ef8b837730da895eb7a5d5b3457ae4458566311c16323caefbb4d6d516ae35895507483100699126d242598fc5b0b222def533f90c78d1b79c84b8c2113dd62741c7b3596157854e1913c35a3e1a0cc7a996633a00817656ddcbd046d7dbf05cdad0de784", 0x9f}, {&(0x7f0000000240)="2cfb8f7545887ce92f8ee926c293c09f8bf1fb05343643fa22cab65c8920e1f569c382051a6f97a0865336a0472ca84968f750d59b3119450d23dee381fb0a5416d02c89cd294b146981582382dc05e5c3f6443a1cca3fa991ad63aab885f27a8a6508bc6738ce82258368b9e64082ffa311de053a6f52768f971a540ce64145efba2c6addc4c86233db89caff12298823581179f916d65ef2ac12fe2ede4e7802d818335bb69038e141207f39", 0xad}, {&(0x7f0000000300)="8d280bb304df36ee15e647cd5e7f0dff35c5d286738c01a1a181e07373677bc5238557d781fe9f9827939f244e6199653fc09e93bb8ae6c8b0d9c2cda801299efd3a46b2aedd539045032ee0370a1adcc4469565d795deab487f6b25241f0d148bd98f1d675c126ae06b4c55cbbda0b046836fb11fa2", 0x76}, {&(0x7f0000000380)="33bd23f5d75b847e7b854ddd8427c8d2e9b8e8c3e55f90ac6d8cb383e6ce8b2f1a856b5c2c545bb8b78d95970075f6bc23f3e24379983439e2d5935a36cb7f4f8434d6545820d4ad1898c5602b81de0736010849d13f201735c5dc43df3ee09d77e383e1aff0b0898dee53f1736e957788da52ff81d46f08db846f355564ea3c1b03ae9397e06709b571ae351572ea9bea5f611e5c8206775408f833ea6deeecf40e2414a0d2464b14e989a353d465bedfc4347aa071f1be72469bed", 0xbc}, {&(0x7f0000000440)="2fcc2d8bdf8c59fec7165bdfda265534c0681135da509614185b967a0a5c21ace6a9", 0x22}], 0x5, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x40, "5934abdc1d58d91978920f91c5fd0475d8376954386d2c3c15bab0282e7e51a161381c58f1db4bcd6d6971f93143ec9b383c010922b4da8156472dd21e14eaa5"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0xa8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x2, 0x4000081)

11:29:54 executing program 7:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100), 0x0)
read(r0, 0x0, 0x0)

[ 1110.204689] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1110.206345] EXT4-fs (loop1): group descriptors corrupted!
[ 1110.215371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1110.229226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:29:54 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="0200000003", 0x5, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:29:55 executing program 7:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
read(0xffffffffffffffff, 0x0, 0x0)

11:29:55 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="2313ba01c7e0ec80e68db8fdde27dc464153394bdf23b61cdf47641c3e4253072c0a76f94ec1441601b18396a59aecbb3ef76561d69b41466aca4ef8b837730da895eb7a5d5b3457ae4458566311c16323caefbb4d6d516ae35895507483100699126d242598fc5b0b222def533f90c78d1b79c84b8c2113dd62741c7b3596157854e1913c35a3e1a0cc7a996633a00817656ddcbd046d7dbf05cdad0de784", 0x9f}, {&(0x7f0000000240)="2cfb8f7545887ce92f8ee926c293c09f8bf1fb05343643fa22cab65c8920e1f569c382051a6f97a0865336a0472ca84968f750d59b3119450d23dee381fb0a5416d02c89cd294b146981582382dc05e5c3f6443a1cca3fa991ad63aab885f27a8a6508bc6738ce82258368b9e64082ffa311de053a6f52768f971a540ce64145efba2c6addc4c86233db89caff12298823581179f916d65ef2ac12fe2ede4e7802d818335bb69038e141207f39", 0xad}, {&(0x7f0000000300)="8d280bb304df36ee15e647cd5e7f0dff35c5d286738c01a1a181e07373677bc5238557d781fe9f9827939f244e6199653fc09e93bb8ae6c8b0d9c2cda801299efd3a46b2aedd539045032ee0370a1adcc4469565d795deab487f6b25241f0d148bd98f1d675c126ae06b4c55cbbda0b046836fb11fa2", 0x76}, {&(0x7f0000000380)="33bd23f5d75b847e7b854ddd8427c8d2e9b8e8c3e55f90ac6d8cb383e6ce8b2f1a856b5c2c545bb8b78d95970075f6bc23f3e24379983439e2d5935a36cb7f4f8434d6545820d4ad1898c5602b81de0736010849d13f201735c5dc43df3ee09d77e383e1aff0b0898dee53f1736e957788da52ff81d46f08db846f355564ea3c1b03ae9397e06709b571ae351572ea9bea5f611e5c8206775408f833ea6deeecf40e2414a0d2464b14e989a353d465bedfc4347aa071f1be72469bed", 0xbc}, {&(0x7f0000000440)="2fcc2d8bdf8c59fec7165bdfda265534c0681135da509614185b967a0a5c21ace6a9", 0x22}], 0x5, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x40, "5934abdc1d58d91978920f91c5fd0475d8376954386d2c3c15bab0282e7e51a161381c58f1db4bcd6d6971f93143ec9b383c010922b4da8156472dd21e14eaa5"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0xa8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x2, 0x4000081)

[ 1110.356748] loop1: detected capacity change from 0 to 2048
[ 1110.369672] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1110.371025] EXT4-fs (loop1): group descriptors corrupted!
11:29:55 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="2313ba01c7e0ec80e68db8fdde27dc464153394bdf23b61cdf47641c3e4253072c0a76f94ec1441601b18396a59aecbb3ef76561d69b41466aca4ef8b837730da895eb7a5d5b3457ae4458566311c16323caefbb4d6d516ae35895507483100699126d242598fc5b0b222def533f90c78d1b79c84b8c2113dd62741c7b3596157854e1913c35a3e1a0cc7a996633a00817656ddcbd046d7dbf05cdad0de784", 0x9f}, {&(0x7f0000000240)="2cfb8f7545887ce92f8ee926c293c09f8bf1fb05343643fa22cab65c8920e1f569c382051a6f97a0865336a0472ca84968f750d59b3119450d23dee381fb0a5416d02c89cd294b146981582382dc05e5c3f6443a1cca3fa991ad63aab885f27a8a6508bc6738ce82258368b9e64082ffa311de053a6f52768f971a540ce64145efba2c6addc4c86233db89caff12298823581179f916d65ef2ac12fe2ede4e7802d818335bb69038e141207f39", 0xad}, {&(0x7f0000000300)="8d280bb304df36ee15e647cd5e7f0dff35c5d286738c01a1a181e07373677bc5238557d781fe9f9827939f244e6199653fc09e93bb8ae6c8b0d9c2cda801299efd3a46b2aedd539045032ee0370a1adcc4469565d795deab487f6b25241f0d148bd98f1d675c126ae06b4c55cbbda0b046836fb11fa2", 0x76}, {&(0x7f0000000380)="33bd23f5d75b847e7b854ddd8427c8d2e9b8e8c3e55f90ac6d8cb383e6ce8b2f1a856b5c2c545bb8b78d95970075f6bc23f3e24379983439e2d5935a36cb7f4f8434d6545820d4ad1898c5602b81de0736010849d13f201735c5dc43df3ee09d77e383e1aff0b0898dee53f1736e957788da52ff81d46f08db846f355564ea3c1b03ae9397e06709b571ae351572ea9bea5f611e5c8206775408f833ea6deeecf40e2414a0d2464b14e989a353d465bedfc4347aa071f1be72469bed", 0xbc}, {&(0x7f0000000440)="2fcc2d8bdf8c59fec7165bdfda265534c0681135da509614185b967a0a5c21ace6a9", 0x22}], 0x5, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x40, "5934abdc1d58d91978920f91c5fd0475d8376954386d2c3c15bab0282e7e51a161381c58f1db4bcd6d6971f93143ec9b383c010922b4da8156472dd21e14eaa5"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0xa8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x2, 0x4000081)

11:30:04 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="0200000003", 0x5, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:30:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:30:04 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]})
setfsuid(0x0)

11:30:04 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
setgroups(0x1, &(0x7f0000000000)=[r1])
r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x80000000, 0x408001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r6, 0x4c00, r5)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008040}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r4, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x79}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0xbab88b2af79a3a4c}, 0x40)

11:30:04 executing program 7:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
read(0xffffffffffffffff, 0x0, 0x0)

11:30:04 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x1, 0x4000081)

11:30:04 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:30:04 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setgroups(0x0, 0x0)
getresgid(&(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000200)=<r0=>0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r2=>0x0}, &(0x7f0000008600)=0xc)
setregid(r2, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r5=>0x0}, &(0x7f0000008600)=0xc)
setregid(r5, 0x0)
r6 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
writev(r6, &(0x7f0000000880)=[{&(0x7f0000000000)="2b0b04ccda5d6f59962e85f0c9d427b0897b43d34aab71a0ec30f9658f8a4a37c79c51646b727359b3e4f971", 0x2c}, {&(0x7f0000000100)="47a75ebb0aba37c648d1", 0xa}, {&(0x7f0000000300)="2ebe829f3dec111cc9a173f273104ef5b0fe77caf3577b83c6896ed21a96463fb1acbc0462b5003c9923d2d91ab0b1f06ac3f394a796c73ea0a890e7103a7fa3abce2dcc1a961f33dea9e8e83abaf25cf1fd999962f8b2dec468fe54c2cf4dc7d2029c1fc06bb5cae0769221115b21e2f81ae5a35dcc2efbd89ac5a30af3f710e9af3c062c0e357598500646bc947a591330b81d1d1d4272f0ca799d0aaedd3355781d11c17dde04f44b8ce20d0138dbb376b0348dc801f51a6172febf46fcf7152f0719b60a62a97f1dfd671f1c82ecb9ad719ee246d9b116054c0074dac2daef287ab2b61c7ff987c07092f9871540413c7a078ce9e18739", 0xf9}, {&(0x7f0000000140)="7956c0d532bb32a57a04d6c80c752efe63a49ec6de5205ba3709e08a2f5d9e1d4f05008471921e326e0ce2a7f1efb84545a416fdcdd6a2172d70ab1c13df73a5d745440581c350073620b71f3d3711d350b08688dd87c3ff4be1f6b9cd697a95716b7a6a18d7f45aacb27f1ac2f138be56bf0aac5d75f020ca2a189a", 0x7c}, {&(0x7f0000000400)="629a8a0c878870ab3b166375c681e0b30d215e6b16873bbe1dfa9d2a49ff65ab27c769f1819690c5cd389ba514cd3cb328f6b7dccdb9286faa40e72ad4e9bb451a920e0ee0549023731c3dd78e47468f8957d50ada078c228fcfa9940e9e6f25c9d91cf8911f4ca9a3d0d304a7541fbe843246ab197266168efe66e986e93222bbb429c3e0c25dba0f18f654c018351eda8370599a7fbc5019af0020c4bf1917d09bf37dd21b7b7e31c63bd5bbe89eb7354cd5f5c9589843a7adb2e02d536390a5763e09a68717", 0xc7}, {&(0x7f0000000500)="7ed5168f8639278ad1b63e568b0bf766f22a72560380e387a2aab5475f2601ec5cfec05b405beea5bf612a688fa1e8b2273545a330c452549dffbc58197a53d5ca67b2bd746fe2124b7a764a7c0553d1dda2166f12c8c448a00117e5b408d8b319d009f2e74ee6e2bac5e27e302927c5ea79697dcb9175f7437eaed056473015f5b10b4a7bdd5776b4f107fa3a3480404b38af290dea9a7d4fe5f38a44934f9d051f2c5ea4b6e15d53760bc1d769c7c01245f5", 0xb3}, {&(0x7f00000005c0)="c9330f7a00929077d80cdc6bddd2761530bded047657729247d81aec6f228b34de217f676ec986d5062412aa9fe1bc8136ed1ee037808c196177a0edecc0349f2c0f0fafe4f1d24bf9c32cac68edc4f6892d8b7f4be3011f995395060e596e03b27e4aa6e9f9883185fc3dbb36e78401e487266988074d1a5e0bcce72d1ef95eabf3a544d3bc86c110f495cf27355c7609f66b9acc93fb31a7c480e77a91311a47275651fc3a9a843c7389fcdf4e80e51974ce29df9fa9b454baaad3", 0xbc}, {&(0x7f0000000680)="7dbf525c24deb9738bd5da44053b5bb58ae73501efdb24c076115a2e9053a011dd78e1823b7a77a6754ae4b512ba90dc1a0bf8e8656d2f48618eecc74e1e920acc7d4b4fd50d9b87a4a1636627123125f6b2800fdd3329023ab8bf37b155991890a73eccce59077ae6af85b0a8", 0x6d}, {&(0x7f0000000700)="148cb32c5a6efbec15a4afb820480f06865a53e5afff832a30e9347c47410b7eb9d172ba29224a08614960adb3959b0f80abb2f06c41a99d113890a8561f4478498622d7e526a549a1e1861c017a50ff559dd705f98503867ee19ae087d0ccd52eab80e96e9c6cff2e6ec3d5c2228bc501ec48001122e4a065e5269a977601ca59a418de95a7884592eb2e9dfb53e3ce636dbc1f83703ec6aaa0b0b86a2fdfce5b227eb3868d6d5b5b3efd0f8aa96c1f08de", 0xb2}, {&(0x7f00000007c0)="48f59f144cdcc1e14ec710f3f0c45cf985f67dfa472886cc81cc59a062acfa004b22372114a8bdd14106e0f0ae371031533dc4ae6a8cdccfa4dec29bedf6ffbead8a703250ae7142fcd0766f065b30d3c8933bfa26fabd5fd2419f4c91db991fe5b28e3cb2aacfe57fecc5e8e4aec9f171d6ecf2f1fc7971b910c748ede1ecbbbbb3c2e16d26cb8b860bb0403d98b767c3b43be5e9527c1778ab78576a068a45afac7a50c6f330bbe337d13542bcb83c79121de7f68187cc48046b013eba", 0xbe}], 0xa)
getgroups(0x8, &(0x7f00000002c0)=[r0, 0xffffffffffffffff, 0x0, r2, 0xee01, r3, 0x0, r5])

[ 1119.844358] loop1: detected capacity change from 0 to 2048
[ 1119.862188] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1119.864081] EXT4-fs (loop1): group descriptors corrupted!
[ 1119.898150] audit: type=1326 audit(1751196604.555:72): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13973 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec42a85b19 code=0x0
[ 1119.911061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:30:04 executing program 7:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
read(0xffffffffffffffff, 0x0, 0x0)

[ 1119.927898] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1119.935573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1119.947190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:30:04 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7}]})
setgroups(0x0, 0x0)
getgroups(0x2, &(0x7f0000000000)=[0xee01, 0xffffffffffffffff])

11:30:04 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="02000000030000", 0x7, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800030000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000091d325d6000000000000000000000000000000000000000000000000ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001008000000000000800010000000af30100040000000000000000000000010000006000000000000000000000000000000000000000000000000000000000000000000000000000000057bbaa66000000000000000000000000000000000000000000000000ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3736383832343338342f66696c65302f66696c653000000000000000000000000000000000000000000000596e6dde000000000000000000000000000000000000000000000000ed8100000a000000d5f4655fd5f4655fd5f4655f00000000000001000001000000000800010000000af301000400000000000000000000000100000070", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:30:04 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
setgroups(0x1, &(0x7f0000000000)=[r1])
r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x80000000, 0x408001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r6, 0x4c00, r5)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008040}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r4, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x79}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0xbab88b2af79a3a4c}, 0x40)

11:30:04 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x1, 0x4000081)

[ 1120.056437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1120.068907] loop1: detected capacity change from 0 to 2048
[ 1120.078932] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1120.080290] EXT4-fs (loop1): group descriptors corrupted!
[ 1120.100122] audit: type=1326 audit(1751196604.760:73): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13987 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37491f3b19 code=0x0
11:30:04 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="02000000030000", 0x7, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800030000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000091d325d6000000000000000000000000000000000000000000000000ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001008000000000000800010000000af30100040000000000000000000000010000006000000000000000000000000000000000000000000000000000000000000000000000000000000057bbaa66000000000000000000000000000000000000000000000000ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3736383832343338342f66696c65302f66696c653000000000000000000000000000000000000000000000596e6dde000000000000000000000000000000000000000000000000ed8100000a000000d5f4655fd5f4655fd5f4655f00000000000001000001000000000800010000000af301000400000000000000000000000100000070", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:30:04 executing program 7:
clock_settime(0x54c33f0edc06c938, &(0x7f0000000000))
r0 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x114, &(0x7f0000000180)=0x1, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2004, @fd_index=0x8, 0xff, 0x0, 0x0, 0x1, 0x1, {0x1}}, 0x2)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18}, './file1\x00'})
r3 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000000c0), &(0x7f0000000340)="ad", 0xfffffffffffffffd)
r4 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x2, 0x202000)
r5 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r3, r4, r5, r0], 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)={0x42}, &(0x7f0000000240)='./file1\x00', 0x18, 0x0, 0x12345}, 0x0)
r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r6, 0x0)
syz_io_uring_submit(r7, 0x0, 0x0, 0x0)
syz_io_uring_complete(r7)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4004, @fd_index, 0x5, 0x7, 0x9, 0x9, 0x0, {0x1, r8}}, 0x1)

[ 1120.264294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.265784] blk_print_req_error: 23 callbacks suppressed
[ 1120.265801] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1120.268398] buffer_io_error: 30 callbacks suppressed
[ 1120.268414] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1120.276266] loop1: detected capacity change from 0 to 2048
[ 1120.289935] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.291272] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1120.292905] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1120.309681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.310819] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1120.312338] Buffer I/O error on dev sr0, logical block 2, async page read
[ 1120.317029] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1120.318676] EXT4-fs (loop1): group descriptors corrupted!
[ 1120.326171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.327404] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1120.328796] Buffer I/O error on dev sr0, logical block 3, async page read
[ 1120.359671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.360697] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1120.361990] Buffer I/O error on dev sr0, logical block 4, async page read
[ 1120.386411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.387557] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1120.389038] Buffer I/O error on dev sr0, logical block 5, async page read
[ 1120.401887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.402959] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1120.404315] Buffer I/O error on dev sr0, logical block 6, async page read
[ 1120.405865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.407304] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1120.408976] Buffer I/O error on dev sr0, logical block 7, async page read
[ 1120.424816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.426055] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1120.427509] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1120.433692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.434663] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1120.435974] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1120.446069] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.449342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.453160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.457194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.458764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.461180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.466000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.467683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.470208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.473295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.475989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.478372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.480303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.485911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.488338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.490015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.492687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.495154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.498042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.500600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.502284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.523711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.531750] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.540327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.545712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.550712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.551916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.554119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.558787] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.560092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.561220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.580717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.585635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.588738] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.591955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.595665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.597031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.598241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1120.935220] audit: type=1326 audit(1751196605.592:74): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13987 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37491f3b19 code=0x0
[ 1122.818968] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1122.821373] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1122.823624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1122.829874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1122.835188] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1124.915617] Bluetooth: hci4: command tx timeout
[ 1126.963572] Bluetooth: hci4: command tx timeout
[ 1129.011620] Bluetooth: hci4: command tx timeout
[ 1131.059867] Bluetooth: hci4: command tx timeout
[ 1139.112538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1139.113639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1139.183511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1139.184580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1139.473259] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1139.477629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1139.484999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:30:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:30:34 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x1, 0x4000081)

11:30:34 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000100)=@v2={0x5, 0x1, 0x6, 0x3, 0x76, "35c46830321a2de73a99b01c0d0336a8f2c8e4b3ea19cda642faaed566f24e73c5c070227bb80eb334b16acef1130596b90b123ff3cfb399f72df9f4968333df9bab0fb6e7c5551691d8d2676ace1fb80ad397d21ba275f6c1d7a897ee15877ff5339aaed95430bf38a2454d3e89b3b11fc39ea95601"}, 0x7f, 0x1)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)
getgroups(0x0, 0x0)

11:30:34 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="02000000030000", 0x7, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:30:34 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
setgroups(0x1, &(0x7f0000000000)=[r1])
r2 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x80000000, 0x408001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r6, 0x4c00, r5)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008040}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r4, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x79}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0xbab88b2af79a3a4c}, 0x40)

11:30:34 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:30:34 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]})
setfsuid(0x0)

11:30:34 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0xff, 0xfd, 0xff}, {0x200, 0x81, 0x7f, 0xffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4, 0x40, 0x1, 0x40000}, {0x9, 0x2, 0x20, 0x7}]})
getgroups(0x4, &(0x7f0000000380)=[0xee00, <r0=>0xee00, 0x0, 0xee00])
r1 = getegid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x6000)
lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r5=>0x0}, &(0x7f0000008600)=0xc)
setregid(r5, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000008600)=0xc)
setregid(r7, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x400)
setgroups(0xa, &(0x7f0000000680)=[r0, r1, r2, r3, r5, r7, 0x0, 0xee01, r8, 0xffffffffffffffff])
r9 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x44000, 0x0)
preadv2(r9, &(0x7f0000000340)=[{&(0x7f0000000240)=""/19, 0x13}, {&(0x7f0000000280)=""/141, 0x8d}], 0x2, 0x7fff, 0x59b40, 0x14)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x81, 0x40, 0x8, 0x8}, {0x0, 0x0, 0x0, 0x7}, {0x5, 0x7, 0xa, 0xffff3ede}]})

11:30:34 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000100)=@v2={0x5, 0x1, 0x6, 0x3, 0x76, "35c46830321a2de73a99b01c0d0336a8f2c8e4b3ea19cda642faaed566f24e73c5c070227bb80eb334b16acef1130596b90b123ff3cfb399f72df9f4968333df9bab0fb6e7c5551691d8d2676ace1fb80ad397d21ba275f6c1d7a897ee15877ff5339aaed95430bf38a2454d3e89b3b11fc39ea95601"}, 0x7f, 0x1)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)
getgroups(0x0, 0x0)

[ 1149.445442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1149.457430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1149.471946] loop1: detected capacity change from 0 to 2048
[ 1149.476804] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1149.479671] audit: type=1326 audit(1751196634.139:75): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14480 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec42a85b19 code=0x0
[ 1149.486389] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1149.488036] EXT4-fs (loop1): group descriptors corrupted!
[ 1149.489744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1149.498016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:30:34 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
setgroups(0x1, &(0x7f0000000000)=[r1])
syz_open_dev$vcsa(&(0x7f00000000c0), 0x80000000, 0x408001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008040}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:30:34 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0xff, 0xfd, 0xff}, {0x200, 0x81, 0x7f, 0xffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4, 0x40, 0x1, 0x40000}, {0x9, 0x2, 0x20, 0x7}]})
getgroups(0x4, &(0x7f0000000380)=[0xee00, <r0=>0xee00, 0x0, 0xee00])
r1 = getegid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x6000)
lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r5=>0x0}, &(0x7f0000008600)=0xc)
setregid(r5, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000008600)=0xc)
setregid(r7, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x400)
setgroups(0xa, &(0x7f0000000680)=[r0, r1, r2, r3, r5, r7, 0x0, 0xee01, r8, 0xffffffffffffffff])
r9 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x44000, 0x0)
preadv2(r9, &(0x7f0000000340)=[{&(0x7f0000000240)=""/19, 0x13}, {&(0x7f0000000280)=""/141, 0x8d}], 0x2, 0x7fff, 0x59b40, 0x14)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x81, 0x40, 0x8, 0x8}, {0x0, 0x0, 0x0, 0x7}, {0x5, 0x7, 0xa, 0xffff3ede}]})

11:30:34 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x40, "5934abdc1d58d91978920f91c5fd0475d8376954386d2c3c15bab0282e7e51a161381c58f1db4bcd6d6971f93143ec9b383c010922b4da8156472dd21e14eaa5"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0xa8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x4000081)

11:30:34 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:30:34 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x4000081)

11:30:34 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000100)=@v2={0x5, 0x1, 0x6, 0x3, 0x76, "35c46830321a2de73a99b01c0d0336a8f2c8e4b3ea19cda642faaed566f24e73c5c070227bb80eb334b16acef1130596b90b123ff3cfb399f72df9f4968333df9bab0fb6e7c5551691d8d2676ace1fb80ad397d21ba275f6c1d7a897ee15877ff5339aaed95430bf38a2454d3e89b3b11fc39ea95601"}, 0x7f, 0x1)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)
getgroups(0x0, 0x0)

[ 1149.617111] loop1: detected capacity change from 0 to 2048
11:30:34 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0xff, 0xfd, 0xff}, {0x200, 0x81, 0x7f, 0xffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4, 0x40, 0x1, 0x40000}, {0x9, 0x2, 0x20, 0x7}]})
getgroups(0x4, &(0x7f0000000380)=[0xee00, <r0=>0xee00, 0x0, 0xee00])
r1 = getegid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x6000)
lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r5=>0x0}, &(0x7f0000008600)=0xc)
setregid(r5, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000008600)=0xc)
setregid(r7, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x400)
setgroups(0xa, &(0x7f0000000680)=[r0, r1, r2, r3, r5, r7, 0x0, 0xee01, r8, 0xffffffffffffffff])
r9 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x44000, 0x0)
preadv2(r9, &(0x7f0000000340)=[{&(0x7f0000000240)=""/19, 0x13}, {&(0x7f0000000280)=""/141, 0x8d}], 0x2, 0x7fff, 0x59b40, 0x14)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x81, 0x40, 0x8, 0x8}, {0x0, 0x0, 0x0, 0x7}, {0x5, 0x7, 0xa, 0xffff3ede}]})

[ 1149.637341] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1149.638071] EXT4-fs (loop1): group descriptors corrupted!
[ 1150.323644] Bluetooth: hci6: command 0x0406 tx timeout
11:30:44 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:30:44 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x4000081)

11:30:44 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
setgroups(0x1, &(0x7f0000000000)=[r1])
syz_open_dev$vcsa(&(0x7f00000000c0), 0x80000000, 0x408001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008040}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:30:44 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000100)=@v2={0x5, 0x1, 0x6, 0x3, 0x76, "35c46830321a2de73a99b01c0d0336a8f2c8e4b3ea19cda642faaed566f24e73c5c070227bb80eb334b16acef1130596b90b123ff3cfb399f72df9f4968333df9bab0fb6e7c5551691d8d2676ace1fb80ad397d21ba275f6c1d7a897ee15877ff5339aaed95430bf38a2454d3e89b3b11fc39ea95601"}, 0x7f, 0x1)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)

11:30:44 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:30:44 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0xff, 0xfd, 0xff}, {0x200, 0x81, 0x7f, 0xffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4, 0x40, 0x1, 0x40000}, {0x9, 0x2, 0x20, 0x7}]})
getgroups(0x4, &(0x7f0000000380)=[0xee00, <r0=>0xee00, 0x0, 0xee00])
r1 = getegid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x6000)
lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r5=>0x0}, &(0x7f0000008600)=0xc)
setregid(r5, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000008600)=0xc)
setregid(r7, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x400)
setgroups(0xa, &(0x7f0000000680)=[r0, r1, r2, r3, r5, r7, 0x0, 0xee01, r8, 0xffffffffffffffff])
r9 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x44000, 0x0)
preadv2(r9, &(0x7f0000000340)=[{&(0x7f0000000240)=""/19, 0x13}, {&(0x7f0000000280)=""/141, 0x8d}], 0x2, 0x7fff, 0x59b40, 0x14)

11:30:44 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:30:44 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x1, 0x4000081)

[ 1160.075115] loop1: detected capacity change from 0 to 2048
[ 1160.089738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1160.096610] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1160.098586] EXT4-fs (loop1): group descriptors corrupted!
[ 1160.107282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:30:44 executing program 5:
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$describe(0x6, r0, &(0x7f0000000600)=""/231, 0xe7)
keyctl$setperm(0x5, r0, 0x200)
set_thread_area(&(0x7f0000000000)={0x2, 0x0, 0x2000, 0x0, 0x1, 0x1, 0x1, 0x1})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

11:30:44 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
setgroups(0x1, &(0x7f0000000000)=[r1])
syz_open_dev$vcsa(&(0x7f00000000c0), 0x80000000, 0x408001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008040}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:30:44 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x4000081)

11:30:44 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="0200000003000000", 0x8, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:30:44 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)

[ 1160.190934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1160.238923] loop1: detected capacity change from 0 to 2048
[ 1160.264231] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[ 1160.265485] EXT4-fs (loop1): group descriptors corrupted!
11:30:44 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0xff, 0xfd, 0xff}, {0x200, 0x81, 0x7f, 0xffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4, 0x40, 0x1, 0x40000}, {0x9, 0x2, 0x20, 0x7}]})
getgroups(0x4, &(0x7f0000000380)=[0xee00, <r0=>0xee00, 0x0, 0xee00])
r1 = getegid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x6000)
lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r5=>0x0}, &(0x7f0000008600)=0xc)
setregid(r5, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000008600)=0xc)
setregid(r7, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x400)
setgroups(0xa, &(0x7f0000000680)=[r0, r1, r2, r3, r5, r7, 0x0, 0xee01, r8, 0xffffffffffffffff])
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0x44000, 0x0)

11:30:44 executing program 5:
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$describe(0x6, r0, &(0x7f0000000600)=""/231, 0xe7)
keyctl$setperm(0x5, r0, 0x200)
set_thread_area(&(0x7f0000000000)={0x2, 0x0, 0x2000, 0x0, 0x1, 0x1, 0x1, 0x1})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

11:30:44 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)

[ 1162.818850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1162.823113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1162.826144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1162.832362] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1162.835224] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1164.915876] Bluetooth: hci4: command tx timeout
[ 1166.963628] Bluetooth: hci4: command tx timeout
[ 1169.011695] Bluetooth: hci4: command tx timeout
[ 1171.059949] Bluetooth: hci4: command tx timeout
[ 1179.518930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1179.520313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1179.600108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1179.601300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1179.915937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1179.919638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:31:13 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:31:13 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x40, "5934abdc1d58d91978920f91c5fd0475d8376954386d2c3c15bab0282e7e51a161381c58f1db4bcd6d6971f93143ec9b383c010922b4da8156472dd21e14eaa5"}]}}}], 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x4000081)

11:31:13 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
setgroups(0x1, &(0x7f0000000000)=[r1])
syz_open_dev$vcsa(&(0x7f00000000c0), 0x80000000, 0x408001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008040}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:31:13 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0xff, 0xfd, 0xff}, {0x200, 0x81, 0x7f, 0xffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4, 0x40, 0x1, 0x40000}, {0x9, 0x2, 0x20, 0x7}]})
getgroups(0x4, &(0x7f0000000380)=[0xee00, <r0=>0xee00, 0x0, 0xee00])
r1 = getegid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x6000)
lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r5=>0x0}, &(0x7f0000008600)=0xc)
setregid(r5, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000008600)=0xc)
setregid(r7, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x400)
setgroups(0xa, &(0x7f0000000680)=[r0, r1, r2, r3, r5, r7, 0x0, 0xee01, r8, 0xffffffffffffffff])

11:31:13 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:31:13 executing program 5:
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$describe(0x6, r0, &(0x7f0000000600)=""/231, 0xe7)
keyctl$setperm(0x5, r0, 0x200)
set_thread_area(&(0x7f0000000000)={0x2, 0x0, 0x2000, 0x0, 0x1, 0x1, 0x1, 0x1})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

11:31:13 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)

11:31:13 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

[ 1189.351980] loop1: detected capacity change from 0 to 2048
[ 1189.358366] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1189.359167] EXT4-fs (loop1): group descriptors corrupted!
11:31:14 executing program 5:
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$describe(0x6, r0, &(0x7f0000000600)=""/231, 0xe7)
keyctl$setperm(0x5, r0, 0x200)
set_thread_area(&(0x7f0000000000)={0x2, 0x0, 0x2000, 0x0, 0x1, 0x1, 0x1, 0x1})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

11:31:14 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:31:14 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x40, "5934abdc1d58d91978920f91c5fd0475d8376954386d2c3c15bab0282e7e51a161381c58f1db4bcd6d6971f93143ec9b383c010922b4da8156472dd21e14eaa5"}]}}}], 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x4000081)

[ 1189.431078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1189.445795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1189.449754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1189.463288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1189.469370] loop1: detected capacity change from 0 to 2048
[ 1189.475705] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[ 1189.476427] EXT4-fs (loop1): group descriptors corrupted!
11:31:14 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0xff, 0xfd, 0xff}, {0x200, 0x81, 0x7f, 0xffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4, 0x40, 0x1, 0x40000}, {0x9, 0x2, 0x20, 0x7}]})
getgroups(0x4, &(0x7f0000000380)=[0xee00, 0xee00, 0x0, 0xee00])
getegid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x6000)
lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540))
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r3=>0x0}, &(0x7f0000008600)=0xc)
setregid(r3, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x400)

11:31:14 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @hopopts={{0x68, 0x29, 0x36, {0x0, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x40, "5934abdc1d58d91978920f91c5fd0475d8376954386d2c3c15bab0282e7e51a161381c58f1db4bcd6d6971f93143ec9b383c010922b4da8156472dd21e14eaa5"}]}}}], 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x4000081)

11:31:14 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:31:14 executing program 2:
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)

11:31:14 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
setgroups(0x1, &(0x7f0000000000)=[r1])
syz_open_dev$vcsa(&(0x7f00000000c0), 0x80000000, 0x408001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008040}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:31:14 executing program 5:
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$describe(0x6, r0, &(0x7f0000000600)=""/231, 0xe7)
keyctl$setperm(0x5, r0, 0x200)
set_thread_area(&(0x7f0000000000)={0x2, 0x0, 0x2000, 0x0, 0x1, 0x1, 0x1, 0x1})
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

11:31:14 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0xff, 0xfd, 0xff}, {0x200, 0x81, 0x7f, 0xffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4, 0x40, 0x1, 0x40000}, {0x9, 0x2, 0x20, 0x7}]})
getgroups(0x4, &(0x7f0000000380)=[0xee00, 0xee00, 0x0, 0xee00])
getegid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x6000)
lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540))
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r3=>0x0}, &(0x7f0000008600)=0xc)
setregid(r3, 0x0)

11:31:14 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
setgroups(0x1, &(0x7f0000000000)=[r1])
syz_open_dev$vcsa(&(0x7f00000000c0), 0x80000000, 0x408001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:31:14 executing program 5:
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$describe(0x6, r0, &(0x7f0000000600)=""/231, 0xe7)
keyctl$setperm(0x5, r0, 0x200)
set_thread_area(&(0x7f0000000000)={0x2, 0x0, 0x2000, 0x0, 0x1, 0x1, 0x1, 0x1})
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

11:31:22 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:31:22 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:31:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:31:22 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
setgroups(0x1, &(0x7f0000000000)=[r1])
syz_open_dev$vcsa(&(0x7f00000000c0), 0x80000000, 0x408001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:31:22 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0xff, 0xfd, 0xff}, {0x200, 0x81, 0x7f, 0xffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4, 0x40, 0x1, 0x40000}, {0x9, 0x2, 0x20, 0x7}]})
getgroups(0x4, &(0x7f0000000380)=[0xee00, 0xee00, 0x0, 0xee00])
getegid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x6000)
lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540))
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc)

11:31:22 executing program 5:
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$describe(0x6, r0, &(0x7f0000000600)=""/231, 0xe7)
keyctl$setperm(0x5, r0, 0x200)
set_thread_area(&(0x7f0000000000)={0x2, 0x0, 0x2000, 0x0, 0x1, 0x1, 0x1, 0x1})
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

11:31:22 executing program 2:
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)

11:31:22 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x40}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x4000081)

[ 1198.353649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1198.360894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1198.363847] loop1: detected capacity change from 0 to 2048
11:31:23 executing program 2:
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)

[ 1198.387395] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 0
[ 1198.398698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1198.406978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:31:23 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
setgroups(0x1, &(0x7f0000000000)=[r1])
syz_open_dev$vcsa(&(0x7f00000000c0), 0x80000000, 0x408001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:31:23 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)

11:31:23 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0xff, 0xfd, 0xff}, {0x200, 0x81, 0x7f, 0xffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4, 0x40, 0x1, 0x40000}, {0x9, 0x2, 0x20, 0x7}]})
getgroups(0x4, &(0x7f0000000380)=[0xee00, 0xee00, 0x0, 0xee00])
getegid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x6000)
lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540))
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

11:31:23 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:31:23 executing program 5:
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$describe(0x6, r0, &(0x7f0000000600)=""/231, 0xe7)
keyctl$setperm(0x5, r0, 0x200)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

11:31:23 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x4000081)

[ 1198.513218] loop1: detected capacity change from 0 to 2048
[ 1198.521361] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 0
11:31:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:31:32 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
setgroups(0x1, &(0x7f0000000000)=[r1])
syz_open_dev$vcsa(&(0x7f00000000c0), 0x80000000, 0x408001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:31:32 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:31:32 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:31:32 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)

11:31:32 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:31:32 executing program 5:
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$describe(0x6, r0, &(0x7f0000000600)=""/231, 0xe7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

11:31:32 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0xff, 0xfd, 0xff}, {0x200, 0x81, 0x7f, 0xffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4, 0x40, 0x1, 0x40000}, {0x9, 0x2, 0x20, 0x7}]})
getgroups(0x4, &(0x7f0000000380)=[0xee00, 0xee00, 0x0, 0xee00])
getegid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x6000)
lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540))
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)

11:31:32 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
setgroups(0x1, &(0x7f0000000000)=[r1])
syz_open_dev$vcsa(&(0x7f00000000c0), 0x80000000, 0x408001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

[ 1207.786017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1207.790298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1207.792441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1207.820224] loop1: detected capacity change from 0 to 2048
11:31:32 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)

[ 1207.844492] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 0
11:31:32 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
setgroups(0x1, &(0x7f0000000000)=[r1])
syz_open_dev$vcsa(&(0x7f00000000c0), 0x80000000, 0x408001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:31:32 executing program 5:
add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

11:31:32 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0) (fail_nth: 1)

11:31:32 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0xff, 0xfd, 0xff}, {0x200, 0x81, 0x7f, 0xffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4, 0x40, 0x1, 0x40000}, {0x9, 0x2, 0x20, 0x7}]})
getgroups(0x4, &(0x7f0000000380)=[0xee00, 0xee00, 0x0, 0xee00])
getegid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x6000)
lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540))
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc)

11:31:32 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1208.011990] FAULT_INJECTION: forcing a failure.
[ 1208.011990] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1208.012980] CPU: 1 UID: 0 PID: 15125 Comm: syz-executor.4 Not tainted 6.16.0-rc3-next-20250627 #1 PREEMPT(voluntary) 
[ 1208.012996] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1208.013005] Call Trace:
[ 1208.013014]  <TASK>
[ 1208.013025]  dump_stack_lvl+0xfa/0x120
[ 1208.013073]  should_fail_ex+0x4d7/0x5e0
[ 1208.013124]  _copy_from_user+0x30/0xd0
[ 1208.013145]  copy_msghdr_from_user+0x88/0x150
[ 1208.013161]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1208.013177]  ? _kstrtoull+0x13e/0x200
[ 1208.013194]  ? __pfx__kstrtoull+0x10/0x10
[ 1208.013214]  ___sys_sendmsg+0xdc/0x1b0
[ 1208.013228]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1208.013247]  ? lock_acquire+0x15e/0x2f0
[ 1208.013261]  ? __fget_files+0x34/0x3b0
[ 1208.013280]  ? find_held_lock+0x2b/0x80
[ 1208.013297]  ? __fget_files+0x203/0x3b0
[ 1208.013315]  ? lock_release+0xc8/0x290
[ 1208.013329]  ? __fget_files+0x20d/0x3b0
[ 1208.013352]  __sys_sendmmsg+0x1f5/0x420
[ 1208.013368]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1208.013384]  ? populate_seccomp_data+0x213/0x540
[ 1208.013402]  ? __seccomp_filter+0x535/0xfa0
[ 1208.013418]  ? __pfx___seccomp_filter+0x10/0x10
[ 1208.013434]  ? fput+0x92/0xd0
[ 1208.013448]  ? ksys_write+0x1a3/0x240
[ 1208.013475]  __x64_sys_sendmmsg+0x9d/0x110
[ 1208.013490]  do_syscall_64+0xbf/0x360
[ 1208.013510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1208.013523] RIP: 0033:0x7f82b34d3b19
[ 1208.013534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1208.013546] RSP: 002b:00007f82b0a49188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1208.013558] RAX: ffffffffffffffda RBX: 00007f82b35e6f60 RCX: 00007f82b34d3b19
[ 1208.013566] RDX: 0000000000000002 RSI: 0000000020001e40 RDI: 0000000000000003
[ 1208.013574] RBP: 00007f82b0a491d0 R08: 0000000000000000 R09: 0000000000000000
[ 1208.013582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1208.013589] R13: 00007fff96ef014f R14: 00007f82b0a49300 R15: 0000000000022000
[ 1208.013605]  </TASK>
[ 1208.021801] loop1: detected capacity change from 0 to 2048
[ 1208.064899] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 0
11:31:42 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0xff, 0xfd, 0xff}, {0x200, 0x81, 0x7f, 0xffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4, 0x40, 0x1, 0x40000}, {0x9, 0x2, 0x20, 0x7}]})
getgroups(0x4, &(0x7f0000000380)=[0xee00, 0xee00, 0x0, 0xee00])
getegid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x6000)
lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540))
socket$nl_xfrm(0x10, 0x3, 0x6)

11:31:42 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)

11:31:42 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0) (fail_nth: 2)

11:31:42 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

11:31:42 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:31:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:31:42 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
setgroups(0x1, &(0x7f0000000000)=[r1])
syz_open_dev$vcsa(&(0x7f00000000c0), 0x80000000, 0x408001)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:31:42 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021000000", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

[ 1218.082967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1218.091190] loop1: detected capacity change from 0 to 2048
[ 1218.091638] FAULT_INJECTION: forcing a failure.
[ 1218.091638] name failslab, interval 1, probability 0, space 0, times 0
[ 1218.093900] CPU: 0 UID: 0 PID: 15145 Comm: syz-executor.4 Not tainted 6.16.0-rc3-next-20250627 #1 PREEMPT(voluntary) 
[ 1218.093933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1218.093948] Call Trace:
[ 1218.093956]  <TASK>
[ 1218.093965]  dump_stack_lvl+0xfa/0x120
[ 1218.094007]  should_fail_ex+0x4d7/0x5e0
[ 1218.094048]  ? sock_kmalloc+0x111/0x170
[ 1218.094080]  should_failslab+0xc2/0x120
[ 1218.094104]  __kmalloc_noprof+0xb4/0x4b0
[ 1218.094138]  ? __import_iovec+0x1df/0x4c0
[ 1218.094173]  sock_kmalloc+0x111/0x170
[ 1218.094209]  ____sys_sendmsg+0x619/0xc20
[ 1218.094245]  ? copy_msghdr_from_user+0xfb/0x150
[ 1218.094272]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1218.094311]  ? _kstrtoull+0x13e/0x200
[ 1218.094345]  ? __pfx__kstrtoull+0x10/0x10
[ 1218.094385]  ___sys_sendmsg+0x10f/0x1b0
[ 1218.094413]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1218.094452]  ? lock_acquire+0x15e/0x2f0
[ 1218.094484]  ? __fget_files+0x34/0x3b0
[ 1218.094520]  ? find_held_lock+0x2b/0x80
[ 1218.094555]  ? __fget_files+0x203/0x3b0
[ 1218.094589]  ? lock_release+0xc8/0x290
[ 1218.094618]  ? __fget_files+0x20d/0x3b0
[ 1218.094664]  __sys_sendmmsg+0x1f5/0x420
[ 1218.094697]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1218.094736]  ? __seccomp_filter+0x535/0xfa0
[ 1218.094768]  ? __pfx___seccomp_filter+0x10/0x10
[ 1218.094801]  ? fput+0x92/0xd0
[ 1218.094826]  ? ksys_write+0x1a3/0x240
[ 1218.094871]  __x64_sys_sendmmsg+0x9d/0x110
[ 1218.094900]  do_syscall_64+0xbf/0x360
[ 1218.094938]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1218.094963] RIP: 0033:0x7f82b34d3b19
[ 1218.094982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1218.095005] RSP: 002b:00007f82b0a49188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1218.095028] RAX: ffffffffffffffda RBX: 00007f82b35e6f60 RCX: 00007f82b34d3b19
[ 1218.095045] RDX: 0000000000000002 RSI: 0000000020001e40 RDI: 0000000000000003
[ 1218.095059] RBP: 00007f82b0a491d0 R08: 0000000000000000 R09: 0000000000000000
[ 1218.095074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1218.095088] R13: 00007fff96ef014f R14: 00007f82b0a49300 R15: 0000000000022000
[ 1218.095119]  </TASK>
[ 1218.131545] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1218.143807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1218.156197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:31:42 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0xff, 0xfd, 0xff}, {0x200, 0x81, 0x7f, 0xffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4, 0x40, 0x1, 0x40000}, {0x9, 0x2, 0x20, 0x7}]})
getgroups(0x4, &(0x7f0000000380)=[0xee00, 0xee00, 0x0, 0xee00])
getegid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x6000)
lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540))

11:31:42 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
setgroups(0x1, &(0x7f0000000000)=[r1])
syz_open_dev$vcsa(&(0x7f00000000c0), 0x80000000, 0x408001)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r2, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

[ 1218.180839] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 0
11:31:42 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)

11:31:42 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

11:31:42 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0) (fail_nth: 3)

11:31:42 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {0x0, 0x0, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:31:42 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)

11:31:42 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0xff, 0xfd, 0xff}, {0x200, 0x81, 0x7f, 0xffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4, 0x40, 0x1, 0x40000}, {0x9, 0x2, 0x20, 0x7}]})
getgroups(0x4, &(0x7f0000000380)=[0xee00, 0xee00, 0x0, 0xee00])
getegid()
newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x6000)

[ 1218.425113] loop1: detected capacity change from 0 to 2048
[ 1218.441745] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 0
11:31:51 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021000000", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:31:51 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

11:31:51 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)

11:31:51 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200), 0x0, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800030000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000091d325d6000000000000000000000000000000000000000000000000ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001008000000000000800010000000af30100040000000000000000000000010000006000000000000000000000000000000000000000000000000000000000000000000000000000000057bbaa66000000000000000000000000000000000000000000000000ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3736383832343338342f66696c65302f66696c653000000000000000000000000000000000000000000000596e6dde000000000000000000000000000000000000000000000000ed8100000a000000d5f4655fd5f4655fd5f4655f00000000000001000001000000000800010000000af301000400000000000000000000000100000070", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:31:51 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:31:51 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
setgroups(0x1, &(0x7f0000000000)=[r1])
syz_open_dev$vcsa(&(0x7f00000000c0), 0x80000000, 0x408001)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r2, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:31:51 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0) (fail_nth: 4)

11:31:51 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0xff, 0xfd, 0xff}, {0x200, 0x81, 0x7f, 0xffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4, 0x40, 0x1, 0x40000}, {0x9, 0x2, 0x20, 0x7}]})
getgroups(0x4, &(0x7f0000000380)=[0xee00, 0xee00, 0x0, 0xee00])
getegid()

[ 1227.095884] loop1: detected capacity change from 0 to 2048
[ 1227.097698] FAULT_INJECTION: forcing a failure.
[ 1227.097698] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1227.098670] CPU: 0 UID: 0 PID: 15182 Comm: syz-executor.4 Not tainted 6.16.0-rc3-next-20250627 #1 PREEMPT(voluntary) 
[ 1227.098686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1227.098694] Call Trace:
[ 1227.098698]  <TASK>
[ 1227.098703]  dump_stack_lvl+0xfa/0x120
[ 1227.098727]  should_fail_ex+0x4d7/0x5e0
[ 1227.098749]  _copy_from_user+0x30/0xd0
[ 1227.098764]  ____sys_sendmsg+0x1ab/0xc20
[ 1227.098784]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1227.098804]  ? _kstrtoull+0x13e/0x200
[ 1227.098820]  ? __pfx__kstrtoull+0x10/0x10
[ 1227.098840]  ___sys_sendmsg+0x10f/0x1b0
[ 1227.098854]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1227.098873]  ? lock_acquire+0x15e/0x2f0
[ 1227.098887]  ? __fget_files+0x34/0x3b0
[ 1227.098906]  ? find_held_lock+0x2b/0x80
[ 1227.098923]  ? __fget_files+0x203/0x3b0
[ 1227.098941]  ? lock_release+0xc8/0x290
[ 1227.098955]  ? __fget_files+0x20d/0x3b0
[ 1227.098977]  __sys_sendmmsg+0x1f5/0x420
[ 1227.098994]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1227.099013]  ? __seccomp_filter+0x535/0xfa0
[ 1227.099030]  ? __pfx___seccomp_filter+0x10/0x10
[ 1227.099046]  ? fput+0x92/0xd0
[ 1227.099060]  ? ksys_write+0x1a3/0x240
[ 1227.099083]  __x64_sys_sendmmsg+0x9d/0x110
[ 1227.099097]  do_syscall_64+0xbf/0x360
[ 1227.099117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1227.099130] RIP: 0033:0x7f82b34d3b19
[ 1227.099140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1227.099152] RSP: 002b:00007f82b0a49188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1227.099164] RAX: ffffffffffffffda RBX: 00007f82b35e6f60 RCX: 00007f82b34d3b19
[ 1227.099172] RDX: 0000000000000002 RSI: 0000000020001e40 RDI: 0000000000000003
[ 1227.099179] RBP: 00007f82b0a491d0 R08: 0000000000000000 R09: 0000000000000000
[ 1227.099186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1227.099193] R13: 00007fff96ef014f R14: 00007f82b0a49300 R15: 0000000000022000
[ 1227.099209]  </TASK>
[ 1227.124178] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 0
[ 1227.142777] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
11:31:51 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0) (fail_nth: 5)

[ 1227.150775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1227.176335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:31:51 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200), 0x0, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1227.185454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:31:51 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)

11:31:51 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0xff, 0xfd, 0xff}, {0x200, 0x81, 0x7f, 0xffff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x4, 0x40, 0x1, 0x40000}, {0x9, 0x2, 0x20, 0x7}]})
getegid()

11:31:51 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

[ 1227.222931] FAULT_INJECTION: forcing a failure.
[ 1227.222931] name failslab, interval 1, probability 0, space 0, times 0
[ 1227.223875] CPU: 0 UID: 0 PID: 15194 Comm: syz-executor.4 Not tainted 6.16.0-rc3-next-20250627 #1 PREEMPT(voluntary) 
[ 1227.223892] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1227.223899] Call Trace:
[ 1227.223903]  <TASK>
[ 1227.223908]  dump_stack_lvl+0xfa/0x120
[ 1227.223932]  should_fail_ex+0x4d7/0x5e0
[ 1227.223954]  should_failslab+0xc2/0x120
[ 1227.223967]  kmem_cache_alloc_node_noprof+0x71/0x470
[ 1227.223986]  ? __alloc_skb+0x2ab/0x370
[ 1227.224002]  __alloc_skb+0x2ab/0x370
[ 1227.224014]  ? __pfx___alloc_skb+0x10/0x10
[ 1227.224027]  ? __is_insn_slot_addr+0x2e/0x290
[ 1227.224046]  ? find_held_lock+0x2b/0x80
[ 1227.224066]  alloc_skb_with_frags+0x8f/0x7c0
[ 1227.224083]  ? __is_insn_slot_addr+0x140/0x290
[ 1227.224101]  sock_alloc_send_pskb+0x7e5/0x960
[ 1227.224113]  ? __kernel_text_address+0xd/0x40
[ 1227.224126]  ? unwind_get_return_address+0x59/0xa0
[ 1227.224150]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[ 1227.224162]  ? __lock_acquire+0x694/0x1b70
[ 1227.224182]  __ip6_append_data+0x23c4/0x44b0
[ 1227.224204]  ? __pfx_udplite_getfrag+0x10/0x10
[ 1227.224224]  ? ip6_mtu+0x9a/0x390
[ 1227.224239]  ? lock_is_held_type+0x9e/0x120
[ 1227.224257]  ? __pfx___ip6_append_data+0x10/0x10
[ 1227.224273]  ? __pfx_ip6_mtu+0x10/0x10
[ 1227.224285]  ? ip6_setup_cork+0xc27/0x14e0
[ 1227.224302]  ip6_make_skb+0x248/0x350
[ 1227.224320]  ? __pfx_udplite_getfrag+0x10/0x10
[ 1227.224339]  ? __pfx_ip6_make_skb+0x10/0x10
[ 1227.224355]  ? cpu_attach_domain+0x680/0x1bf0
[ 1227.224377]  ? lock_acquire+0x15e/0x2f0
[ 1227.224389]  ? ip6_dst_hoplimit+0xc3/0x430
[ 1227.224402]  ? find_held_lock+0x2b/0x80
[ 1227.224419]  ? ip6_dst_hoplimit+0x1ac/0x430
[ 1227.224431]  ? lock_release+0xc8/0x290
[ 1227.224443]  ? lock_is_held_type+0x9e/0x120
[ 1227.224465]  udpv6_sendmsg+0x1f5c/0x2ad0
[ 1227.224485]  ? __pfx_udplite_getfrag+0x10/0x10
[ 1227.224510]  ? __pfx_udpv6_sendmsg+0x10/0x10
[ 1227.224536]  ? __lock_acquire+0xc65/0x1b70
[ 1227.224557]  ? __might_fault+0x138/0x190
[ 1227.224571]  ? lock_release+0xc8/0x290
[ 1227.224583]  ? __might_fault+0xe0/0x190
[ 1227.224596]  ? __pfx_udpv6_sendmsg+0x10/0x10
[ 1227.224615]  inet6_sendmsg+0x109/0x150
[ 1227.224628]  ? __pfx_inet6_sendmsg+0x10/0x10
[ 1227.224639]  ____sys_sendmsg+0x7b2/0xc20
[ 1227.224659]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1227.224678]  ? _kstrtoull+0x13e/0x200
[ 1227.224695]  ? __pfx__kstrtoull+0x10/0x10
[ 1227.224715]  ___sys_sendmsg+0x10f/0x1b0
[ 1227.224729]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1227.224748]  ? lock_acquire+0x15e/0x2f0
[ 1227.224760]  ? __fget_files+0x34/0x3b0
[ 1227.224780]  ? find_held_lock+0x2b/0x80
[ 1227.224797]  ? __fget_files+0x203/0x3b0
[ 1227.224814]  ? lock_release+0xc8/0x290
[ 1227.224828]  ? __fget_files+0x20d/0x3b0
[ 1227.224851]  __sys_sendmmsg+0x1f5/0x420
[ 1227.224867]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1227.224886]  ? __seccomp_filter+0x535/0xfa0
[ 1227.224901]  ? __pfx___seccomp_filter+0x10/0x10
[ 1227.224918]  ? fput+0x92/0xd0
[ 1227.224931]  ? ksys_write+0x1a3/0x240
[ 1227.224954]  __x64_sys_sendmmsg+0x9d/0x110
[ 1227.224969]  do_syscall_64+0xbf/0x360
[ 1227.224989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1227.225001] RIP: 0033:0x7f82b34d3b19
[ 1227.225012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1227.225024] RSP: 002b:00007f82b0a49188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1227.225035] RAX: ffffffffffffffda RBX: 00007f82b35e6f60 RCX: 00007f82b34d3b19
[ 1227.225044] RDX: 0000000000000002 RSI: 0000000020001e40 RDI: 0000000000000003
[ 1227.225051] RBP: 00007f82b0a491d0 R08: 0000000000000000 R09: 0000000000000000
[ 1227.225058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1227.225065] R13: 00007fff96ef014f R14: 00007f82b0a49300 R15: 0000000000022000
[ 1227.225081]  </TASK>
[ 1227.262077] loop1: detected capacity change from 0 to 2048
11:31:51 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
setgroups(0x1, &(0x7f0000000000)=[r1])
syz_open_dev$vcsa(&(0x7f00000000c0), 0x80000000, 0x408001)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r2, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:31:51 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)

[ 1227.317187] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 0
11:32:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021000000", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:32:02 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5, 0xff, 0xfd, 0xff}, {0x200, 0x81, 0x7f, 0xffff}]})
getegid()

11:32:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:32:02 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0) (fail_nth: 6)

11:32:02 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

11:32:02 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
setgroups(0x1, &(0x7f0000000000)=[r1])
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:32:02 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)

11:32:02 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200), 0x0, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1237.641679] loop1: detected capacity change from 0 to 2048
[ 1237.647501] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1237.653128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1237.659081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1237.668306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1237.671114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:32:02 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)

11:32:02 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

11:32:02 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0) (fail_nth: 7)

[ 1237.701724] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 0
11:32:02 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
setregid(r1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:32:02 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
getegid()

11:32:02 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0100000000", 0x5, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:32:02 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

11:32:02 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)

[ 1237.887291] loop1: detected capacity change from 0 to 2048
[ 1237.902019] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 0
11:32:12 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getegid()

11:32:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000210000000800", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:32:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:32:12 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0) (fail_nth: 8)

11:32:12 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0), &(0x7f0000008600)=0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r2, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:32:12 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0100000000", 0x5, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:32:12 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

11:32:12 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)

[ 1248.362983] audit: type=1326 audit(1751196733.022:76): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15258 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37491f3b19 code=0x0
[ 1248.363064] loop1: detected capacity change from 0 to 2048
[ 1248.370899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1248.375275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1248.382232] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 0
[ 1248.416051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:32:13 executing program 7:
getegid()

11:32:13 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0100000000", 0x5, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800030000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000091d325d6000000000000000000000000000000000000000000000000ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001008000000000000800010000000af30100040000000000000000000000010000006000000000000000000000000000000000000000000000000000000000000000000000000000000057bbaa66000000000000000000000000000000000000000000000000ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3736383832343338342f66696c65302f66696c653000000000000000000000000000000000000000000000596e6dde000000000000000000000000000000000000000000000000ed8100000a000000d5f4655fd5f4655fd5f4655f00000000000001000001000000000800010000000af301000400000000000000000000000100000070", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:32:13 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

[ 1248.438712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:32:13 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0) (fail_nth: 9)

[ 1248.487830] loop1: detected capacity change from 0 to 2048
11:32:13 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

[ 1248.500639] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 0
11:32:13 executing program 7:
getegid()

[ 1248.530597] FAULT_INJECTION: forcing a failure.
[ 1248.530597] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1248.532427] CPU: 0 UID: 0 PID: 15276 Comm: syz-executor.4 Not tainted 6.16.0-rc3-next-20250627 #1 PREEMPT(voluntary) 
[ 1248.532457] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1248.532477] Call Trace:
[ 1248.532487]  <TASK>
[ 1248.532496]  dump_stack_lvl+0xfa/0x120
[ 1248.532535]  should_fail_ex+0x4d7/0x5e0
[ 1248.532573]  _copy_from_user+0x30/0xd0
[ 1248.532600]  copy_msghdr_from_user+0x88/0x150
[ 1248.532627]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1248.532652]  ? match_held_lock+0xb1/0xd0
[ 1248.532685]  ? lock_acquire+0x15e/0x2f0
[ 1248.532711]  ? find_held_lock+0x2b/0x80
[ 1248.532742]  ? finish_task_switch.isra.0+0x201/0x840
[ 1248.532783]  ___sys_sendmsg+0xdc/0x1b0
[ 1248.532808]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1248.532831]  ? finish_task_switch.isra.0+0x206/0x840
[ 1248.532868]  ? trace_sched_exit_tp+0xc9/0x110
[ 1248.532893]  ? __schedule+0xe5d/0x3520
[ 1248.532926]  ? __pfx___schedule+0x10/0x10
[ 1248.532954]  ? lock_acquire+0x15e/0x2f0
[ 1248.532977]  ? __might_fault+0xe0/0x190
[ 1248.533004]  ? __might_fault+0x138/0x190
[ 1248.533037]  __sys_sendmmsg+0x1f5/0x420
[ 1248.533068]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1248.533104]  ? __seccomp_filter+0x535/0xfa0
[ 1248.533134]  ? __pfx___seccomp_filter+0x10/0x10
[ 1248.533166]  ? fput+0x92/0xd0
[ 1248.533190]  ? ksys_write+0x1a3/0x240
[ 1248.533233]  __x64_sys_sendmmsg+0x9d/0x110
[ 1248.533260]  do_syscall_64+0xbf/0x360
[ 1248.533297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1248.533320] RIP: 0033:0x7f82b34d3b19
[ 1248.533337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1248.533359] RSP: 002b:00007f82b0a49188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1248.533381] RAX: ffffffffffffffda RBX: 00007f82b35e6f60 RCX: 00007f82b34d3b19
[ 1248.533396] RDX: 0000000000000002 RSI: 0000000020001e40 RDI: 0000000000000003
[ 1248.533410] RBP: 00007f82b0a491d0 R08: 0000000000000000 R09: 0000000000000000
[ 1248.533424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1248.533437] R13: 00007fff96ef014f R14: 00007f82b0a49300 R15: 0000000000022000
[ 1248.533467]  </TASK>
11:32:13 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="01000000000005", 0x7, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:32:13 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

[ 1248.605605] loop1: detected capacity change from 0 to 2048
[ 1248.612401] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 0
11:32:24 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)

11:32:24 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:32:24 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0) (fail_nth: 10)

11:32:24 executing program 7:
getegid()

11:32:24 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="01000000000005", 0x7, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:32:24 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000210000000800", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:32:24 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
getgroups(0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:32:24 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

[ 1259.739180] loop1: detected capacity change from 0 to 2048
[ 1259.748716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1259.752199] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 0
[ 1259.759013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1259.767194] audit: type=1326 audit(1751196744.427:77): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15292 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37491f3b19 code=0x0
11:32:24 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x71, 0x0, 0x7fff0000}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

[ 1259.788190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1259.794879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:32:24 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="01000000000005", 0x7, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1259.802155] FAULT_INJECTION: forcing a failure.
[ 1259.802155] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1259.803212] CPU: 1 UID: 0 PID: 15307 Comm: syz-executor.4 Not tainted 6.16.0-rc3-next-20250627 #1 PREEMPT(voluntary) 
[ 1259.803236] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1259.803254] Call Trace:
[ 1259.803263]  <TASK>
[ 1259.803275]  dump_stack_lvl+0xfa/0x120
[ 1259.803325]  should_fail_ex+0x4d7/0x5e0
11:32:24 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
getegid()

[ 1259.803368]  _copy_from_user+0x30/0xd0
[ 1259.803384]  ____sys_sendmsg+0x1ab/0xc20
[ 1259.803405]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1259.803426]  ? kfree+0x22d/0x470
[ 1259.803442]  ? __pfx__kstrtoull+0x10/0x10
[ 1259.803475]  ___sys_sendmsg+0x10f/0x1b0
[ 1259.803495]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1259.803520]  ? __lock_acquire+0xc65/0x1b70
[ 1259.803541]  ? __fget_files+0x34/0x3b0
[ 1259.803563]  ? lock_acquire+0x15e/0x2f0
[ 1259.803575]  ? __might_fault+0xe0/0x190
[ 1259.803589]  ? find_held_lock+0x2b/0x80
[ 1259.803608]  ? __might_fault+0x138/0x190
[ 1259.803625]  __sys_sendmmsg+0x1f5/0x420
[ 1259.803642]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1259.803661]  ? __seccomp_filter+0x535/0xfa0
[ 1259.803679]  ? __pfx___seccomp_filter+0x10/0x10
[ 1259.803696]  ? fput+0x92/0xd0
[ 1259.803709]  ? ksys_write+0x1a3/0x240
[ 1259.803733]  __x64_sys_sendmmsg+0x9d/0x110
[ 1259.803747]  do_syscall_64+0xbf/0x360
[ 1259.803768]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1259.803781] RIP: 0033:0x7f82b34d3b19
[ 1259.803791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1259.803803] RSP: 002b:00007f82b0a49188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1259.803816] RAX: ffffffffffffffda RBX: 00007f82b35e6f60 RCX: 00007f82b34d3b19
[ 1259.803824] RDX: 0000000000000002 RSI: 0000000020001e40 RDI: 0000000000000003
[ 1259.803832] RBP: 00007f82b0a491d0 R08: 0000000000000000 R09: 0000000000000000
[ 1259.803839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1259.803847] R13: 00007fff96ef014f R14: 00007f82b0a49300 R15: 0000000000022000
[ 1259.803863]  </TASK>
11:32:24 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

[ 1259.855089] loop1: detected capacity change from 0 to 2048
[ 1259.860117] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 0
11:32:24 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0) (fail_nth: 11)

11:32:24 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0100000000000500", 0x8, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:32:24 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
getegid()

11:32:24 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

[ 1259.981502] FAULT_INJECTION: forcing a failure.
[ 1259.981502] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1259.983251] CPU: 0 UID: 0 PID: 15322 Comm: syz-executor.4 Not tainted 6.16.0-rc3-next-20250627 #1 PREEMPT(voluntary) 
[ 1259.983281] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1259.983294] Call Trace:
[ 1259.983303]  <TASK>
[ 1259.983312]  dump_stack_lvl+0xfa/0x120
[ 1259.983351]  should_fail_ex+0x4d7/0x5e0
[ 1259.983390]  _copy_to_user+0x32/0xd0
[ 1259.983418]  simple_read_from_buffer+0xe0/0x180
[ 1259.983453]  proc_fail_nth_read+0x189/0x270
[ 1259.983499]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1259.983534]  ? security_file_permission+0x22/0x90
[ 1259.983559]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1259.983593]  vfs_read+0x1eb/0xbe0
[ 1259.983633]  ? __pfx_vfs_read+0x10/0x10
[ 1259.983668]  ? lock_release+0xc8/0x290
[ 1259.983697]  ? __fget_files+0x20d/0x3b0
[ 1259.983741]  ksys_read+0x121/0x240
[ 1259.983775]  ? __pfx_ksys_read+0x10/0x10
[ 1259.983810]  ? __secure_computing+0x18d/0x290
[ 1259.983844]  do_syscall_64+0xbf/0x360
[ 1259.983880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1259.983904] RIP: 0033:0x7f82b348669c
[ 1259.983932] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1259.983954] RSP: 002b:00007f82b0a49170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1259.983976] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f82b348669c
[ 1259.983990] RDX: 000000000000000f RSI: 00007f82b0a491e0 RDI: 0000000000000004
[ 1259.984004] RBP: 00007f82b0a491d0 R08: 0000000000000000 R09: 0000000000000000
[ 1259.984017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1259.984030] R13: 00007fff96ef014f R14: 00007f82b0a49300 R15: 0000000000022000
[ 1259.984060]  </TASK>
11:32:34 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:32:34 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:32:34 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0100000000000500", 0x8, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:32:34 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40000000)

11:32:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:32:34 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
getegid()

11:32:34 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

11:32:34 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000210000000800", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

[ 1269.988558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1269.993070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1270.008252] loop1: detected capacity change from 0 to 2048
11:32:34 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1270.019258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1270.020875] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 0
[ 1270.032081] audit: type=1326 audit(1751196754.692:78): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15341 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37491f3b19 code=0x0
[ 1270.049105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:32:34 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:32:34 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x2, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:32:34 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0100000000000500", 0x8, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:32:34 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]})
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

11:32:34 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
getegid()

[ 1270.120541] audit: type=1326 audit(1751196754.780:79): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15354 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec42a85b19 code=0x0
11:32:34 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

[ 1270.143117] loop1: detected capacity change from 0 to 2048
[ 1270.166709] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 0
11:32:34 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:32:34 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
getegid()

11:32:34 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:32:34 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x3, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:32:35 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000000)

11:32:35 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021000000080003", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:32:35 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:32:35 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
getegid()

11:32:35 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:32:35 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x4, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:32:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

[ 1270.895683] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1270.902530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1270.910967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1270.964602] loop1: detected capacity change from 0 to 2048
[ 1270.980445] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 0
[ 1271.015455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1271.028350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:32:35 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
getegid()

11:32:45 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x8, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:32:45 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:32:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x34)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:32:45 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021000000080003", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:32:45 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:32:45 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:32:45 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
getegid()

11:32:45 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]})
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

[ 1280.551942] loop1: detected capacity change from 0 to 2048
[ 1280.568178] audit: type=1326 audit(1751196765.224:80): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15404 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec42a85b19 code=0x0
[ 1280.568283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1280.577130] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 0
[ 1280.586263] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1280.594185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1280.594527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1280.611228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1285.493609] Bluetooth: hci4: command 0x0406 tx timeout
11:32:56 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
getegid()

11:32:56 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:32:56 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]})
get_thread_area(&(0x7f0000000080)={0x80000000, 0x20000000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1})

11:32:56 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021000000080003", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:32:56 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:32:56 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:32:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x33)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:32:56 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xb, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1292.110034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1292.122775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1292.138927] loop1: detected capacity change from 0 to 2048
[ 1292.153693] audit: type=1326 audit(1751196776.813:81): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15422 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec42a85b19 code=0x0
[ 1292.154154] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1292.167976] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 0
11:32:56 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

[ 1292.183903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1292.186609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1292.216398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:32:56 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]})
getegid()

11:32:56 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xe, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:32:56 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

[ 1292.270027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:32:56 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1292.370135] loop1: detected capacity change from 0 to 2048
[ 1292.383969] EXT4-fs (loop1): unsupported descriptor size 0
11:32:57 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x30, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1294.847350] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1294.853113] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1294.855122] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1294.860795] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1294.863421] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1296.947622] Bluetooth: hci6: command tx timeout
[ 1298.995558] Bluetooth: hci6: command tx timeout
[ 1301.043614] Bluetooth: hci6: command tx timeout
[ 1303.092567] Bluetooth: hci6: command tx timeout
[ 1311.418989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1311.420098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1311.491076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1311.492385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1311.790950] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1311.794373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1311.798039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:33:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:33:25 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)

11:33:25 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]})
getegid()

11:33:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x32)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:33:25 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:33:25 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:33:25 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x60, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:33:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

[ 1321.329446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1321.347941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1321.368904] loop1: detected capacity change from 0 to 2048
[ 1321.379275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:33:26 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

[ 1321.397372] EXT4-fs (loop1): unsupported descriptor size 0
[ 1321.400307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1321.402639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1321.418700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:33:26 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xfc, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:33:26 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0) (fail_nth: 1)

11:33:26 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]})
getegid()

[ 1321.485012] FAULT_INJECTION: forcing a failure.
[ 1321.485012] name fail_usercopy, interval 1, probability 0, space 0, times 0
11:33:26 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1321.486545] CPU: 0 UID: 0 PID: 15933 Comm: syz-executor.5 Not tainted 6.16.0-rc3-next-20250627 #1 PREEMPT(voluntary) 
[ 1321.486572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1321.486583] Call Trace:
[ 1321.486590]  <TASK>
[ 1321.486597]  dump_stack_lvl+0xfa/0x120
[ 1321.486632]  should_fail_ex+0x4d7/0x5e0
[ 1321.486670]  _copy_to_user+0x32/0xd0
[ 1321.486695]  simple_read_from_buffer+0xe0/0x180
[ 1321.486725]  proc_fail_nth_read+0x189/0x270
[ 1321.486757]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1321.486787]  ? security_file_permission+0x22/0x90
[ 1321.486810]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1321.486840]  vfs_read+0x1eb/0xbe0
[ 1321.486875]  ? __pfx_vfs_read+0x10/0x10
[ 1321.486907]  ? lock_release+0xc8/0x290
[ 1321.486932]  ? __fget_files+0x20d/0x3b0
[ 1321.486971]  ksys_read+0x121/0x240
[ 1321.487000]  ? __pfx_ksys_read+0x10/0x10
[ 1321.487032]  ? __secure_computing+0x18d/0x290
[ 1321.487061]  do_syscall_64+0xbf/0x360
[ 1321.487093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1321.487113] RIP: 0033:0x7fec42a3869c
[ 1321.487128] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1321.487147] RSP: 002b:00007fec3fffb170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1321.487166] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fec42a3869c
[ 1321.487179] RDX: 000000000000000f RSI: 00007fec3fffb1e0 RDI: 0000000000000003
[ 1321.487191] RBP: 00007fec3fffb1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1321.487203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1321.487215] R13: 00007ffce4ccba8f R14: 00007fec3fffb300 R15: 0000000000022000
[ 1321.487241]  </TASK>
[ 1321.562302] loop1: detected capacity change from 0 to 2048
11:33:26 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0)

11:33:26 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x300, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:33:26 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)

[ 1321.607869] EXT4-fs (loop1): unsupported descriptor size 0
11:33:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

[ 1330.386765] loop1: detected capacity change from 0 to 2048
11:33:35 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xb00, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:33:35 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0)

11:33:35 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]})
getegid()

11:33:35 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x12b042, 0x0)
fgetxattr(r0, &(0x7f0000000080)=@known='user.syz\x00', &(0x7f0000000100)=""/78, 0x4e)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180)="3f3b2459d74c5cf333dbae100ca04293bb8e9ad47377e2d12f8ee0b00c5de13ad711946ebd2b9560cebede4b4197d84fd745176deaa4b2ff5d296c3b4d436fb5768ff1b2b17f89989368853fcfa738b513f998945686e6979cdc6fffd61605405c4587cb89625fc5f449528a4a353b2fcf06570a8c6baaac769eb73d06931bb72730b32c32cc8e3d6df20f1d39ada316de22da6738681cc0ab70c75acf1ce08164466911e2e8e68a21be0024e43c2f9a3ba33f12ec39", 0xb6}, 0x68)
get_thread_area(0x0)

11:33:35 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:33:35 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:33:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x32)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

[ 1330.396787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1330.400972] EXT4-fs (loop1): unsupported descriptor size 0
[ 1330.404668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:33:35 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1330.460936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1330.464996] audit: type=1326 audit(1751196815.124:82): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15962 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc601026b19 code=0x0
[ 1330.467416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1330.479863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1330.482971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:33:35 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0)

[ 1330.526728] loop1: detected capacity change from 0 to 2048
11:33:35 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xe00, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1330.558880] EXT4-fs (loop1): unsupported descriptor size 0
11:33:35 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {0x0, 0x0, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:33:35 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000080)={0x67, @broadcast, 0x4e22, 0x4, 'ovf\x00', 0x15, 0xffffffff, 0x10}, 0x2c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)

11:33:35 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x3000, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:33:35 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

[ 1330.683632] loop1: detected capacity change from 0 to 2048
[ 1330.693741] EXT4-fs (loop1): unsupported descriptor size 0
11:33:45 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x6000, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:33:45 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]})
getegid()

11:33:45 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:33:45 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
io_setup(0x5, &(0x7f0000000140))
memfd_create(&(0x7f0000000100)='cgroup.type\x00', 0x1)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x8, 0x4, 0x81, 0x3f}, {0x8001, 0xff, 0x8, 0x3}, {0x5, 0xff, 0x7f, 0x1}, {0x0, 0xfa, 0x1, 0x1}]})
get_thread_area(0x0)

11:33:45 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

11:33:45 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:33:45 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) (fail_nth: 1)

11:33:45 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x32)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

[ 1340.845112] audit: type=1326 audit(1751196825.504:83): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16195 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc601026b19 code=0x0
11:33:45 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

[ 1340.899271] FAULT_INJECTION: forcing a failure.
[ 1340.899271] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1340.901109] CPU: 0 UID: 0 PID: 16208 Comm: syz-executor.2 Not tainted 6.16.0-rc3-next-20250627 #1 PREEMPT(voluntary) 
[ 1340.901140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1340.901153] Call Trace:
[ 1340.901160]  <TASK>
[ 1340.901170]  dump_stack_lvl+0xfa/0x120
[ 1340.901208]  should_fail_ex+0x4d7/0x5e0
[ 1340.901248]  _copy_to_user+0x32/0xd0
[ 1340.901276]  simple_read_from_buffer+0xe0/0x180
[ 1340.901311]  proc_fail_nth_read+0x189/0x270
[ 1340.901346]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1340.901380]  ? security_file_permission+0x22/0x90
[ 1340.901406]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1340.901439]  vfs_read+0x1eb/0xbe0
[ 1340.901487]  ? __pfx_vfs_read+0x10/0x10
[ 1340.901522]  ? lock_release+0xc8/0x290
[ 1340.901551]  ? __fget_files+0x20d/0x3b0
[ 1340.901595]  ksys_read+0x121/0x240
[ 1340.901628]  ? __pfx_ksys_read+0x10/0x10
[ 1340.901663]  ? __secure_computing+0x18d/0x290
[ 1340.901697]  do_syscall_64+0xbf/0x360
[ 1340.901733]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1340.901756] RIP: 0033:0x7f37491a669c
[ 1340.901774] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1340.901795] RSP: 002b:00007f3746769170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1340.901818] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f37491a669c
[ 1340.901833] RDX: 000000000000000f RSI: 00007f37467691e0 RDI: 0000000000000003
[ 1340.901848] RBP: 00007f37467691d0 R08: 0000000000000000 R09: 0000000000000000
[ 1340.901862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1340.901875] R13: 00007ffec612de9f R14: 00007f3746769300 R15: 0000000000022000
[ 1340.901906]  </TASK>
[ 1340.924982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1340.931840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1340.938151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1340.940090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1340.941866] loop1: detected capacity change from 0 to 2048
[ 1340.969844] EXT4-fs (loop1): unsupported descriptor size 0
11:33:45 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x80fe, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:33:45 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:33:45 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

11:33:45 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:33:45 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x0, 0x20, 0x61, 0x4}, {0x7fff, 0x81, 0x6, 0x80}, {0xb20, 0x80, 0x7, 0x9}, {0x20, 0x8, 0x6, 0x40}, {0x1000, 0xc3, 0x4, 0x413}]})

[ 1341.110877] Zero length message leads to an empty skb
[ 1341.155828] loop1: detected capacity change from 0 to 2048
11:33:45 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

[ 1341.169739] EXT4-fs (loop1): unsupported descriptor size 0
11:33:45 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

11:33:45 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x93ae, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:34:00 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]})
getegid()

11:34:00 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xae93, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:34:00 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x33)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:34:00 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100), 0x0, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:34:00 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

11:34:00 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:34:00 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x4, 0x3, 0x7, 0x72}, {0xfff8, 0x0, 0xee, 0x9f4}, {0x200, 0x48}, {0x20, 0x7, 0x2, 0x7f}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:34:00 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
creat(&(0x7f0000000080)='./file0\x00', 0x30)
get_thread_area(0x0)

[ 1355.948380] audit: type=1326 audit(1751196840.608:84): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16439 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc601026b19 code=0x0
[ 1355.961424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1355.971231] loop1: detected capacity change from 0 to 2048
[ 1355.973541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1355.978346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1355.984985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1356.000627] EXT4-fs (loop1): unsupported descriptor size 0
11:34:00 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xc0fe, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:34:00 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:34:00 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x86, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:34:00 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4c", 0x10, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1356.189397] loop1: detected capacity change from 0 to 2048
11:34:00 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xfc00, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1356.210884] EXT4-fs (loop1): unsupported descriptor size 0
11:34:00 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:34:00 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x42, 0x0, 0xfe, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0x76, 0xc3, 0x3, 0x4}, {0x3, 0x1, 0x2, 0x4}, {0x3ff, 0x5, 0xb2, 0xffffff7f}, {0x9, 0x81, 0x6, 0x3ff}, {0x1, 0x1, 0x26, 0x1000}, {0x401, 0x1, 0x52, 0x2}, {0x0, 0xa, 0x2, 0x5b}]})
get_thread_area(0x0)

11:34:00 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xfe80, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:34:10 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fsetxattr(r0, &(0x7f0000000080)=@known='user.syz\x00', &(0x7f0000000100)=')\x00', 0x2, 0x0)
get_thread_area(0x0)
get_thread_area(&(0x7f0000000000)={0x2518, 0x1000, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1})

11:34:10 executing program 2:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x9, 0x8, 0x81}, {0x4, 0x8, 0x6a, 0xff}, {0x9, 0x8, 0x3, 0x3}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r1 = dup(r0)
inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x10000000)
inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x3ff, 0x72, 0x85, 0x7}, {0x1ff, 0x80, 0xb3, 0x5}, {0x2, 0x7, 0x10, 0xffffffff}, {0x1, 0x96, 0x0, 0x7ff}, {0x7, 0x7, 0x4}, {0x1000, 0x0, 0x3, 0x6}]})

11:34:10 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4c", 0x10, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:34:10 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:34:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x33)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:34:10 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:34:10 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xfec0, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:34:10 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getegid() (fail_nth: 1)

[ 1365.858736] loop1: detected capacity change from 0 to 2048
[ 1365.879624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1365.885052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1365.888168] EXT4-fs (loop1): unsupported descriptor size 0
[ 1365.892735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1365.897161] FAULT_INJECTION: forcing a failure.
[ 1365.897161] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1365.898610] CPU: 0 UID: 0 PID: 16710 Comm: syz-executor.7 Not tainted 6.16.0-rc3-next-20250627 #1 PREEMPT(voluntary) 
[ 1365.898635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1365.898647] Call Trace:
[ 1365.898654]  <TASK>
[ 1365.898661]  dump_stack_lvl+0xfa/0x120
[ 1365.898696]  should_fail_ex+0x4d7/0x5e0
[ 1365.898730]  _copy_to_user+0x32/0xd0
[ 1365.898755]  simple_read_from_buffer+0xe0/0x180
[ 1365.898784]  proc_fail_nth_read+0x189/0x270
[ 1365.898815]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1365.898844]  ? security_file_permission+0x22/0x90
[ 1365.898867]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1365.898895]  vfs_read+0x1eb/0xbe0
[ 1365.898929]  ? __pfx_vfs_read+0x10/0x10
[ 1365.898960]  ? lock_release+0xc8/0x290
[ 1365.898985]  ? __fget_files+0x20d/0x3b0
[ 1365.899022]  ksys_read+0x121/0x240
[ 1365.899051]  ? __pfx_ksys_read+0x10/0x10
[ 1365.899081]  ? __secure_computing+0x18d/0x290
[ 1365.899110]  do_syscall_64+0xbf/0x360
[ 1365.899141]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1365.899161] RIP: 0033:0x7fc600fd969c
[ 1365.899176] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1365.899182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1365.899195] RSP: 002b:00007fc5fe59c170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1365.899213] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc600fd969c
[ 1365.899225] RDX: 000000000000000f RSI: 00007fc5fe59c1e0 RDI: 0000000000000003
11:34:10 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x0, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

[ 1365.899237] RBP: 00007fc5fe59c1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1365.899249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1365.899260] R13: 00007ffdbe861c7f R14: 00007fc5fe59c300 R15: 0000000000022000
[ 1365.899286]  </TASK>
11:34:10 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xff00, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:34:10 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getegid()

11:34:10 executing program 2:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\n\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000100)={0xa60, r2, 0x420, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x62}}}}, [@NL80211_ATTR_NAN_FUNC={0x4a0, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x494, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0xb5}]}, @NL80211_ATTR_NAN_FUNC={0x2c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x8000}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x7a}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "de6b424443aa"}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SERVICE_INFO={0x10, 0xb, "39a225149af24167cf434aab"}]}, @NL80211_ATTR_NAN_FUNC={0x558, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x1}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "38ddc0499e2a"}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x1}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xff}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x514, 0xe, 0x0, 0x1, [{0xe0, 0x0, "136702dd4192bac4625ef574121c794b20509073f767c038c2762b239e3d316199aa92469618125d63c5fe3056f9e6139ec7f51a4e8005fc0185ac07fb2dd8d0a5fe177a2faa1fcaeb532faaf4f598b470dc713771165dd6e8063a59e49004fdc0b65f117905231e404d85cd722a8141417defe974ea7ba92afd6d773ba19ad2627db60d92181ddcbd854e128dcf8a312996d8c31e653869ef8a00ff0b9b7c0904b286c7fc37811fe1ccf7bef8c7bd4ef53c10fcb1d71637fe081035a9f87e251a0e96f16b05f49bfb860f9e983d99c121513bb4c5dfa898a9aecf3c"}, {0x9f, 0x0, "f8ad807b489f96e5bef6e12c251dc567a3bcd6a6392ffc7afb6c8858a6b3a618aa912a172db0078b897a8608d74a6877b019547f352569516a554beec18179f17ca9aa93d5f481c6c8fba992a709088e5230f56643dac0a68c19abc683b4684d5bb6dfc45602205e1599cabbefb0bba8573d405b0f61d3ba2155b3bf42c9ec02883abed82a6c8d45bea5cbe6b869ff8de0bcf4ab7279f961abe1a4"}, {0xcb, 0x0, "1bf694e742d7a00ff94d88081a10e75ca081d762b8bb765b7a2e321f7d2300e57ccadd0b909895e96186f0e027f45e09b6ebb8df4c8a837420568821887ea60b447bd64accacdc07adf2052fed52f53865f1ee470fdd3c15318c1efad6da56e1c8273440ea1bbe9bf074eff16acd220bb31edfc678f1387f105edfa690fcf64e9584992edd189a3ebe3e17118ea3d1b8b9397bd277ee0b4f1b7731994af556a21ad52def71778d3894b400464ea0172b9c762d3bd142f48c3342febbccd150406c12799490b05c"}, {0x91, 0x0, "5f9a95579186e0b8fa2a5dfc12ce951217ccc423ab347fd215d3c432b09567d0398dea3d93fc322698632e0471e14308181a03aa1f27530dbdcfddbe60db389d1eb05b1ebc354415ec3fd925bc0048b5e1ebb5e6741ab1828183a6c98b242327b83294dc57b43bf36866809c24ba6b81e524b41469c764be036acbd0f9edc9b3a2c9bf23fa2df0c0c675d7da74"}, {0xc4, 0x0, "b573ee72840764eb9bc1634319ed840704ecb98c459a79540a499bef7f8b6e73d1d4917b1b174797d30576ce56a763def1335f913670441416a24ff4e81090b4bde04eaba480c713ea925fb90f6e330c17a8dece9a0d970a203b08d17a5927973c10d91df176db6728b383156e23d99238f4fd42b9b3c38d2b57e7fea0904005b340e8bc9e0d6901b6e77698d66d5c8043753c00b4b5f87f252e87fb832951b27f67e63e90081b1a29f7ff1b73eb1220a855da148d96e87e7669d70ba2bb5286"}, {0xfd, 0x0, "9a170d9eefbe86bc38669d940d24b476c1e4553dc71e3fe365f1a5341d17168c6660f6ac3f41efa024eae5b195d05d72d737fccc76b29d25666ff991da198f1532986685d028fc2c48b7b01d55f5c6d43dc2db4715f09563971084ed81b79797d6320e3e6bcf8cd0a67fcc7c87bf495a68a1cb0bf45cfff0de2509ea36ae35db021c211bc3955423d56385ec23d23df2b35e03281c1f7db4e64989eddfd0130f852856a511aff8c3e42649a2ef2fb9e36a6814e6381162bbff20d0e0cd78977096cb5dcce996ff0f2f3312bd6c79638e15fc7451d15ea8322163b3225d4b6aef252d86b7b9e28742d1c969de1bdd1479614a10a65d39fdd640"}, {0x6c, 0x0, "54a81e4744f8ebb1c1990155e7de8f3db555f4c5750ab0bd5499d3042bc03f42a4878b94a887ee5d860f1df3dce3c819493c25c98ffb1e2185f8b83eed8fd0bc246b30a614ba2d52eb3a4417cb174e105da40272728b41d070b20e346d979170a64856c069a4d33a"}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "075dd36c9b05"}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}]}, 0xa60}, 0x1, 0x0, 0x0, 0x4040880}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:34:10 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4c", 0x10, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1366.103376] loop1: detected capacity change from 0 to 2048
11:34:10 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x11000, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1366.126745] EXT4-fs (loop1): unsupported descriptor size 0
11:34:10 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
memfd_secret(0x0)
get_thread_area(0x0)

11:34:10 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x0, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:34:10 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5a", 0x18, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800030000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000091d325d6000000000000000000000000000000000000000000000000ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001008000000000000800010000000af30100040000000000000000000000010000006000000000000000000000000000000000000000000000000000000000000000000000000000000057bbaa66000000000000000000000000000000000000000000000000ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3736383832343338342f66696c65302f66696c653000000000000000000000000000000000000000000000596e6dde000000000000000000000000000000000000000000000000ed8100000a000000d5f4655fd5f4655fd5f4655f00000000000001000001000000000800010000000af301000400000000000000000000000100000070", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1366.276202] loop1: detected capacity change from 0 to 2048
[ 1366.296230] EXT4-fs (loop1): unsupported descriptor size 0
11:34:20 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5a", 0x18, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:34:20 executing program 7:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x7]}, 0x8, 0x80000)
sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000880}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getegid()

11:34:20 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0xfffa, 0x8, 0x0, 0x80}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:34:20 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x33)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:34:20 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x114ac, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:34:20 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x0, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:34:20 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r1, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:34:20 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
get_thread_area(0x0)
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0x1, 0x4, 0x5, 0x68}, {0x401, 0x5, 0x1f, 0x3ff}, {0xbb, 0x1f, 0x1c, 0x8d}]})
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
r1 = dup(r0)
r2 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000480)={0x0, <r3=>0x0, "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", "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"})
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001480)={r3, 0x100000000})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x9, 0x80, 0x3, 0xfffff95e}, {0xfffa, 0x1, 0x0, 0x3f}]})
r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
readlinkat(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/154, 0x9a)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000000180)=""/173)

[ 1375.902970] loop1: detected capacity change from 0 to 2048
[ 1375.910174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1375.916724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:34:20 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

[ 1375.942699] EXT4-fs (loop1): unsupported descriptor size 0
[ 1375.974742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1375.988728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:34:20 executing program 2:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000140)={0x3, 0x0, '\x00', 0x1, &(0x7f0000000080)})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x2a0, 0x91c})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:34:20 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:34:20 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x34000, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:34:20 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x480)
ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x8000)
r2 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r2, 0x4c00, r0)
ioctl$CDROMSEEK(r0, 0x5316, &(0x7f0000000000)={0x9, 0x7f, 0xae, 0x7, 0x7f, 0x8})
getegid()
getpgid(0x0)

11:34:20 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5a", 0x18, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:34:20 executing program 5:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x00\x00\x00\x00\xa4l\xd0', &(0x7f0000000100)="ad", 0x1)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2f66696c65302025205e21265c205d202023282c405d200ab624bbc4679348150f337f8980ed1fb5e4b9916e3a6e0ea1dde0631a73b5619a2ae1ce123c52c07e4e3d5c4136da73ce66b97f2f12c5cb60c4ea201bb32cf11aac9c31ecc7cc9806ff8925d9d48a9cf32f0812a1edfb38484ea26d253f09e1f28dcd259d65145316c6d2c26722cb1b144404b19f0222467b0d66c89438cfe5625f9506589ad51416a5749fb655d3d8e1be21b39a5b69dbcd30034e439918f6b9773c9336686dc31d000000"], 0xc7)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)
r1 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='\x80)-$].\x00', &(0x7f0000000080)='^!&\\', 0x0)

[ 1376.147870] loop1: detected capacity change from 0 to 2048
[ 1376.163193] EXT4-fs (loop1): unsupported descriptor size 0
11:34:29 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:34:29 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x4)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r2, 0x4c00, r1)
getdents(r1, &(0x7f0000000140)=""/120, 0x78)

11:34:29 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:34:29 executing program 7:
socketpair(0x10, 0x4, 0x6, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x3f8, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6c0a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x717b2b1d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa0000000}]}, @TIPC_NLA_NODE={0x1d8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "0746425a84f2e9f5481e8f10a98bf7256c62c118a46d85b3d3d4c4f637ebaad942"}}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "0a535ff93f7734b5594d60e7aa081bbddfe17ea90a283efecef36cb8bd33b2"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "1a55a3da69245f7a099a0abf2aa80c907992638537a1d309c76f799d01"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x190}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0x99, 0x3, "e8124d0033a4fe829489a15486c088b5faa92797f34fe0d98e3e414932c75e3d2e03b004ec908e951ed0e458d172f5eb86e4abab00a1237697f07eb516fbc93c5b4a4b4c6a8481c080a477d54957f54bd81bb33e25a7cce72bb4892743b771d2645e215c64c27d82fed2a6288701b2834874773b8006f001298e10a9cbf4bd68b9a84ac08f8f8de713512f2f94dd54c391465a0471"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3303}, @TIPC_NLA_NODE_ID={0x37, 0x3, "bd1b0e43e3e2a8c8f734a7e63d01779de98c94b27054b9e77c9e824045f7b5139565d8105846dca6850ca01a5037ffc8433eb3"}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9cf3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8c5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x76deeb20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6da4}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x996}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @loopback, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xff, @mcast1, 0x9}}}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}]}, 0x3f8}, 0x1, 0x0, 0x0, 0x1}, 0x5)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000bc0)={{}, r2, 0x10, @unused=[0x9, 0x10001, 0x3f, 0x6], @devid})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, <r3=>r1, @in_args={0x4}}, './file0\x00'})
getsockopt$inet6_buf(r3, 0x29, 0x32, &(0x7f0000000880)=""/244, &(0x7f0000000980)=0xf4)
r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
futimesat(r4, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)={{0x77359400}, {0x77359400}})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0xffff, 0x5, 0x1, 0x3}]})
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x40, 0xe5, 0x3, 0x3}, {0x3, 0x7f, 0x3f, 0x400}, {0x7, 0x1f, 0xf1, 0x7f}, {0x6, 0x40, 0x0, 0x401}]})
getegid()
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000001bc0)={0x0, 0x101, 0x1, 0x0, 0xa, [{0x9, 0xffffffffffffff63, 0xe1cc, '\x00', 0x50a}, {0x0, 0x8, 0x1e, '\x00', 0x406}, {0xbe7, 0x2, 0x9, '\x00', 0x6}, {0x1, 0x40, 0x80000000, '\x00', 0x4}, {0x1, 0x2, 0x5, '\x00', 0x102}, {0x80, 0x0, 0x8}, {0x0, 0x6, 0x3, '\x00', 0x3408}, {0x8, 0x0, 0xff, '\x00', 0x280c}, {0x5, 0x24, 0xd6, '\x00', 0x1202}, {0x7fffffff, 0x8, 0x80000000, '\x00', 0x802}]})

11:34:29 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x40000, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:34:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x32)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:34:29 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600", 0x1c, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:34:29 executing program 5:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x2d}, 0x4e24, 0xed, 0x4e24, 0x24, 0xa, 0x20, 0x0, 0x32, 0x0, 0xffffffffffffffff}, {0x3, 0x2, 0x401, 0xe75d, 0x1ff, 0x9, 0x3}, {0x39, 0x1, 0x8, 0x2}, 0x40, 0x6e6bc0, 0x2, 0x1, 0x1, 0x2}, {{@in=@remote, 0x4d6, 0x32}, 0xa, @in=@remote, 0x3501, 0x2, 0x3, 0x7, 0x3, 0xff, 0x1000}}, 0xe8)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg(r0, &(0x7f0000000e80)={&(0x7f00000003c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, 0x0}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@local, @in6=@private2, 0x4e24, 0x165a, 0x4e24, 0x8001, 0xa, 0x80, 0xa0, 0x6f, r1}, {0x8, 0x80000000, 0xe4, 0x2, 0x1f, 0x80, 0x5, 0x6}, {0x4, 0xffffffff, 0x81, 0x4}, 0x800, 0x6e6bb3, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4d2, 0x32}, 0x2, @in=@remote, 0x34ff, 0x4, 0x1, 0x3, 0x932, 0x1}}, 0xe8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000540)={'ip6tnl0\x00', r1, 0x4, 0x9, 0x6, 0x6, 0x1, @rand_addr=' \x01\x00', @private2, 0x8, 0x7, 0x4, 0x5867}})
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x60, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x41, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x0)

[ 1384.746887] loop1: detected capacity change from 0 to 2048
[ 1384.751253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1384.760580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1384.769673] EXT4-fs (loop1): unsupported descriptor size 0
[ 1384.775330] audit: type=1326 audit(1751196869.434:85): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17182 comm="syz-executor.7" exe="/syz-executor.7" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc601026b19 code=0x0
[ 1384.784119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:34:29 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x80000, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:34:29 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x0)

11:34:29 executing program 2:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

[ 1384.847927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:34:29 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600", 0x1c, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:34:29 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
read$rfkill(r0, &(0x7f0000000000), 0x8)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000080)=0x5)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ff70000}]})
getegid()

[ 1384.947991] loop1: detected capacity change from 0 to 2048
[ 1384.966006] EXT4-fs (loop1): unsupported descriptor size 0
[ 1385.029925] audit: type=1326 audit(1751196869.688:86): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=17308 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc601026b19 code=0x7ff70000
11:34:29 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
io_setup(0x7fffffff, &(0x7f0000000000)=<r0=>0x0)
io_cancel(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x7fff, 0xffffffffffffffff, &(0x7f0000000100)="d9d5a7e3d3036e05acaf829270801a10df7fe353c12c3ac5691ba446cb6a33ff32c011d6f47666ba1db811cfe5802c81773db9fb6b5f7f37ead39aba75279a86760d759acde66b24427808d30c400a7d69f3bd57ffd2269f8f0df552f7d5eb0fc98150cef42bdfac7f73e9d8eeea114fea932657874fc3dc531a301322dc968cba002825908682a5d7c7a257b5fb730afa45ef2d1241c2408f7589c4826cce363f40c3ecf98c04b00e67922181d0227556d0bc677b", 0xb5, 0x2, 0x0, 0x3}, &(0x7f0000000200))

11:34:29 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x100100, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:34:29 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x38}}, 0x0)

[ 1387.582178] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1387.586139] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1387.588105] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1387.594370] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1387.597352] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1389.619568] Bluetooth: hci6: command tx timeout
[ 1391.668360] Bluetooth: hci6: command tx timeout
[ 1393.715846] Bluetooth: hci6: command tx timeout
[ 1395.763861] Bluetooth: hci6: command tx timeout
[ 1403.740441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1403.742057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1403.808338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1403.809504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1404.099137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1404.105193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:34:57 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getegid()
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180))

11:34:57 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600", 0x1c, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:34:57 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:34:57 executing program 2:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000000))
r2 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000140)='[$)\x04&/,[]\x00', 0x0, r0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x200)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x6, &(0x7f0000000080))

11:34:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x32)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:34:57 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x400300, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:34:57 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}}, 0x0)

11:34:57 executing program 5:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001cc0)=ANY=[@ANYBLOB="7cc926914c6131b7f1b3e2e6", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="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"])
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffeffff)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
clone3(&(0x7f0000001b00)={0x100, &(0x7f0000001840)=<r2=>0xffffffffffffffff, &(0x7f0000001880), &(0x7f00000018c0), {0x12}, &(0x7f0000001900)=""/227, 0xe3, &(0x7f0000001a00)=""/184, &(0x7f0000001ac0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r1}}, 0x58)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000001b80)={0x0, 0x10000, 0x10001})
recvmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000140), 0x6e, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/3, 0x3}, {&(0x7f0000001200)=""/96, 0x60}, {&(0x7f0000001740)=""/239, 0xef}, {&(0x7f0000001380)=""/76, 0x4c}, {&(0x7f0000001400)=""/70, 0x46}, {&(0x7f0000001480)=""/221, 0xdd}, {&(0x7f0000001580)=""/159, 0x9f}], 0x8, &(0x7f0000001c80)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)
get_thread_area(0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
r5 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
pwrite64(r5, &(0x7f0000001c00)="414f6b5ba9443456ce8a2a098708d23f9f03e8d4a7a6a16968a6d3c64e7ad4557068416816172ed3eb24f5d3e390684679fda167099ee4dee26a2c38d6735306885d40c11744", 0x46, 0x8)
ioctl$FIONCLEX(r4, 0x5450)

11:34:57 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}}, 0x0)

[ 1412.934022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1412.948953] loop1: detected capacity change from 0 to 2048
[ 1412.949394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1412.956926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:34:57 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x1000000, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1412.967659] EXT4-fs (loop1): unsupported descriptor size 0
[ 1412.970705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:34:57 executing program 7:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getegid()
r1 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
r2 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
clock_gettime(0x0, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0})
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000001c0)='{\x00', &(0x7f0000000200)="c2611e3cd88e7d91a3fbeb78b18cab20653b717f40a0d155ef941e2fbf009fed685170612a55b301d465f5a5bc15cee22fab6cad", 0x34)
ppoll(&(0x7f0000000000)=[{r1, 0x10e}, {0xffffffffffffffff, 0x2040}, {r2, 0x200}, {r0, 0x8000}, {r0, 0x8000}, {r0, 0x30}], 0x6, &(0x7f0000000100)={r3, r4+10000000}, &(0x7f0000000140)={[0x4]}, 0x8)

11:34:57 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x202400, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="1ff8ff01000100ffffff03000000000000010000c36fecd0f08df75df6b3859eb00000000000000000000000010001000000000000008000000700000000000000d1c400000012000005000000000000006800000000000000001f000000000000000000004000000000000000009a4c34000000000000000600ddff00"/142])
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x4, 0x9, 0x446a8aed}, {0xc3, 0x4, 0x9, 0x6}, {0x735, 0x0, 0x8, 0x9da}]})
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000140)={0x4, &(0x7f0000000280)=[{0xfffa, 0x8, 0x3f, 0x102004}, {0x8, 0x0, 0x4c}, {0x3, 0x14, 0x1, 0x9}, {0xd399, 0x5, 0x5, 0x7}]})

11:34:57 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getegid()

11:34:57 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x2000000, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:34:57 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae13256000100", 0x1e, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:34:57 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x34}}, 0x0)

11:34:57 executing program 7:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0xbe, 0x1}, {0x5, 0x7, 0x5}, {0x3f, 0x7, 0x40, 0x2}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100))
getegid()
r1 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
fadvise64(r1, 0x3f, 0x55, 0x3)

11:34:57 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x2c}}, 0x0)

11:34:57 executing program 5:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
faccessat2(r0, &(0x7f0000000880)='./file0\x00', 0x9, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3f, 0x8, 0x0, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x9, &(0x7f0000000800)=[{0xfee2, 0x88, 0x6, 0xae}, {0x3, 0xd1, 0x2, 0x12}, {0x8, 0x0, 0x27, 0x8}, {0x20, 0xc7, 0x3, 0x76}, {0x8, 0x80, 0x3f, 0x1}, {0x2b7, 0x2, 0x81, 0xbd}, {0x4, 0x4, 0x4, 0x2}, {0x54b8, 0x3f, 0x3, 0x4}, {0x9, 0x1, 0xff, 0x81}]})
r2 = syz_mount_image$iso9660(&(0x7f00000007c0), &(0x7f00000000c0)='./file0\x00', 0x3ff80000000000, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000100)="0507dd109803188c1ca44307b020834191ea2ce36cf3a61b01443ed373b2b45a7cdb6299f3710cce0565d412b14f848d17bd2b80570babe79735ff91af5890ca36c5bf101b18b9fa3dc448a2965209562534625de86025d5b2357d0c02df6f6a574a73cb78530d337322b7a2e2810e7205580194235e11f2eac399747a0d15e83d307238d6613c8a0ca0c33637ffbdda4b08abc13fd8de2cfcdb2c13c58a6a1d9eab10d61ce716ae9a8d70fe30e91612ead64130e444e800c2fd7724fc1c5392eb72496298c9108477c6dec9b030303c7fa46bd9", 0xd4, 0x80000001}, {&(0x7f0000000200)="cd988e6b1c9742932fa73a6e19024fdadfc1e0efa768dab7e3a6d1d5efdc02eb4477226654b7f1a1d7f141af3bfc9abb79c8622650755ed4c007e6feb7f36d465f20457c75f753918104", 0x4a, 0x100}, {&(0x7f0000000280)="8445add57a4228865e53d1687387349643b1999aefe4b40b4e2a5b7659e2f32f01739873aed2dfedd5030c520ea910095f13cd73729b1bf016e4412522777c6862c5050f64f252eaaa5e11f0e39961539cfdbf12c62255c89cb9d33b67a1a53eb24891848ac72b11db3f0384de328a670d2b274df67b4a44135b2bcfe6fdafb1c93f3cdfcd2c371dc497c2c3a98ecd2a97f70a32dbded4ad78ac587d6b308dd8d4d1a91d6fc09838884422885533d6bc3f796892fb3a2ad17d044882b9e5560f4294e3853eb4afa14b5e5ab89c025c8b0680f4c90c", 0xd5, 0x80000001}, {&(0x7f0000000380)="2aa92e93cf965abebc4462f0c9c9ad216742eff9e34bba8f8b950831c1b049165324a142e8f0b138d87723e2a9384bf19e79c1ed9e59ee9f4f25423d0d98a4ff916f7683757e9067449c0ab9a55696c7b6f937de843177c75ffc92190abc7292eba1f48bf73a6619b71d3454b7b5d7d7d1f944c45ff88170c1574f7f8bc34067277910c87d161e7109edfd9c4a8393f76bdb", 0x92, 0x1}, {&(0x7f0000000440)="69d624e299d6e888b09c708910ad1c51fd7990672dae566707fb3c0ab433db60aa3f7b3aa444b800d282998b2e90ecd0be711120d38a8019ca094709807fac4aa4d94c7a5987120e22c5eb3ba76ada6727ada9170d0c2303f4bb526a006d5562492ebc5d8aa2b214466148b0d80df56e98562be0ebfe8325161c78f5675f6a42330b40b979f9dd5de6e65ad3a2e98a09ab1a8bc80b7de2a5be4139857b2058734691253284170cd28e212ac8553d947124141f3ff8dc1c21f8c32d74165682a9f4", 0xc1, 0x40000000}, {&(0x7f0000000540)="ac3c58f17ead5db38586511b93d86717ebdf88bc6a05b2bde808710f0aac563ef19ad93aa9f71faa20e7fe4a74fe6a2aa9626dfbd27d58175913a36587276c4f9ce507807c30966ce2", 0x49, 0x593}], 0x1000020, &(0x7f0000000680)={[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x65, 0x30, 0x30, 0x38, 0x34, 0x33, 0x37], 0x2d, [0x0, 0x32, 0x64, 0x35], 0x2d, [0x38, 0x34, 0x32, 0x32], 0x2d, [0x37, 0x63, 0x63, 0x57], 0x2d, [0x35, 0x33, 0x39, 0x64, 0x30, 0x30, 0x32, 0x66]}}}, {@pcr={'pcr', 0x3d, 0x1a}}, {@smackfstransmute={'smackfstransmute', 0x3d, ']+-\''}}, {@pcr={'pcr', 0x3d, 0x4}}]})
futimesat(r2, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={{0x77359400}, {0x0, 0xea60}})

[ 1413.166104] loop1: detected capacity change from 0 to 2048
[ 1413.181675] EXT4-fs (loop1): unsupported descriptor size 0
[ 1413.242084] loop5: detected capacity change from 0 to 264192
11:35:05 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0x8, &(0x7f0000000000)=[{0x7, 0x9, 0x4, 0x5}, {0x6, 0x0, 0xaa, 0x1}, {0x95ba, 0x0, 0x2}, {0x7, 0xba, 0x6, 0x2}, {0x8, 0xff, 0xaf, 0xfff}, {0x4, 0x64, 0x40, 0x6}, {0x2, 0x4, 0x8, 0x8}, {0x2d6, 0x0, 0x45, 0x8000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:35:05 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x20}}, 0x0)

11:35:05 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x3000000, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:35:05 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)
io_setup(0x567, &(0x7f0000000100)=<r1=>0x0)
get_thread_area(&(0x7f00000003c0)={0x8001, 0x20100000, 0x2000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1})
r2 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r3=>r0, {0x24}}, './file0\x00'})
io_cancel(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x3ff, r2, &(0x7f0000000140)="b0bf11706dda66549ce178f2088022b886e00ba8843a670c853055e163f81cfaf1e987d85b3c952b658555f07c9c3f04129d981e58298b6b6c16ffa1bbc800a181963ea41ae1f4bc018b517e4e989399a15d7e5fd55179970cafd54f83fa7e99", 0x60, 0x3, 0x0, 0x1, r3}, &(0x7f0000000240))
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x9, 0x0, 0x14, 0x1}, {0x1, 0x9, 0x3, 0x3ff}, {0x3, 0x40, 0x0, 0x7fff}, {0x3, 0x1, 0x7f, 0x7}, {0x0, 0x5, 0x1, 0x7fffffff}]})
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000300)={0xa, &(0x7f0000000280)=[{0xbf7a, 0x81, 0xff, 0xfffff786}, {0x3f, 0x2, 0x6, 0x401}, {0x1, 0x5, 0x7f, 0xaf}, {0xaf, 0x6, 0x6, 0xffff0000}, {0x7e4f, 0x0, 0x5, 0x80}, {0x1f, 0x1, 0x4, 0x4}, {0x400, 0xb0, 0x4, 0x9}, {0x3, 0x5, 0x0, 0x401}, {0x2, 0x9, 0xab, 0x10001}, {0x3, 0x4, 0x1d, 0x8}]})
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000380)={0x6, &(0x7f0000000340)=[{0x0, 0xff, 0xf, 0x6}, {0x7ff, 0x5, 0xe4, 0x1000}, {0x1ff, 0x2, 0x26, 0x1}, {0x200, 0x1, 0x1, 0x3}, {0xfe7, 0x1, 0x1, 0x10000}, {0x9, 0x1, 0x5, 0x80}]})

11:35:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x32)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:35:05 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae13256000100", 0x1e, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:35:05 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$KDGKBDIACR(r0, 0x5412, &(0x7f00000000c0)=""/4096)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000001140)={0x7, {0xa, 0x6, 0x7f, 0x10001, 0x9}})
r1 = getegid()
r2 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000010c0)={0x0, 0x0, @a}, 0x48, 0xfffffffffffffffa)
keyctl$chown(0x4, r2, 0xffffffffffffffff, r1)
setfsgid(r1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='fd/3\x00')
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000011c0)={<r4=>0xffffffffffffffff})
tee(r3, r4, 0x7, 0xf)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r6=>0x0}, &(0x7f0000008600)=0xc)
setregid(r6, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r8=>0x0}, &(0x7f0000008600)=0xc)
r9 = getegid()
setresgid(r8, r9, r6)
setregid(r8, 0x0)
setresgid(r6, r1, r8)

11:35:05 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

[ 1421.253190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1421.261908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1421.276528] loop1: detected capacity change from 0 to 2048
11:35:05 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000000)={0x6, {0x2d, 0x2, 0x9, 0x4, 0xffffffff7fffffff}})
get_thread_area(0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x1000, 0x3, 0x5b, 0x29c07509}, {0x8, 0x80, 0x1, 0xbaa8}]})
set_thread_area(&(0x7f0000000080)={0xffffff68, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1})

11:35:05 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1421.309400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1421.320729] EXT4-fs (loop1): unsupported descriptor size 0
11:35:05 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x8000000, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1421.340712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:35:06 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x20}}, 0x0)

11:35:06 executing program 2:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
pread64(r0, &(0x7f0000000100)=""/206, 0xce, 0xffff)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:35:06 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae13256000100", 0x1e, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:35:06 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xb000000, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1421.421778] loop1: detected capacity change from 0 to 2048
[ 1421.428600] EXT4-fs (loop1): unsupported descriptor size 0
11:35:06 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0x8000}}, './file0\x00'})
sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000125bddbdf4199", @ANYRES32=0x0, @ANYBLOB="0c0099002000000066000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x810)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r0, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}}, 0x8000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:35:06 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:35:06 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}]}, 0x20}}, 0x0)

11:35:06 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x9}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:35:06 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1421.543341] audit: type=1326 audit(1751196906.203:87): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18281 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37491f3b19 code=0x0
[ 1422.375845] audit: type=1326 audit(1751196907.035:88): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18281 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37491f3b19 code=0x0
11:35:15 executing program 2:
prctl$PR_GET_THP_DISABLE(0x2a)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:35:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:35:15 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)
get_thread_area(&(0x7f0000000100)={0x7, 0xffffffffdffff7ff, 0x1000, 0x1, 0x3, 0x0, 0x1})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x8, 0xc0, 0x1, 0x3ff}, {0x7ff, 0xff, 0x3, 0x5}]})

11:35:15 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getegid()
setfsgid(r0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r2=>0x0}, &(0x7f0000008600)=0xc)
setresgid(0xee01, r0, r2)
setregid(r2, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/132, 0x84}, {&(0x7f00000003c0)=""/20, 0x14}, {&(0x7f00000001c0)=""/161, 0xa1}, {&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000340)=""/110, 0x6e}], 0x5, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r3=>0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r4=>0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x2120)
setresgid(r2, r0, r3)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
setresgid(r0, r0, r4)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r6=>0x0}, &(0x7f0000008600)=0xc)
setregid(r6, 0x0)
setresgid(r6, r0, r3)

11:35:15 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xb0195aa, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:35:15 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800030000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000091d325d6000000000000000000000000000000000000000000000000ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001008000000000000800010000000af30100040000000000000000000000010000006000000000000000000000000000000000000000000000000000000000000000000000000000000057bbaa66000000000000000000000000000000000000000000000000ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3736383832343338342f66696c65302f66696c653000000000000000000000000000000000000000000000596e6dde000000000000000000000000000000000000000000000000ed8100000a000000d5f4655fd5f4655fd5f4655f00000000000001000001000000000800010000000af301000400000000000000000000000100000070", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:35:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x0, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x33)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:35:15 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001cc0)=ANY=[@ANYBLOB="7cc926914c6131b7f1b3e2e6", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="7f00008200006570000007000000946fb23c9c323203c829e7841723231ba2a5ac2e631321447c86ee6e65f85afe218a1e07cfb4cbab30519f8e2f623c77be68db543157a47ca8c77bb1bcb16fda282f018a478214355cad56f91a8e1a925f0eef33c9ea6d0c1b9e97e2b648d04a943dfd1525eb053f3d351dea36c617546f1a680f1dd6902ade062bc874be55f760624010bcbf76183b7c2035489217a6cb67d15b29a8ab5f7c715e388dacc8f22022317d3a965b19d6b0ddf2fac95052fd2f407da9f4524a6d80c42704cd729a4e293fae00c23ae30c26ad1480202ac9d172e04eb67a8f4e6b9347d6e412b599dc6e6f8da85f67922677c7339b9e373dd2b49eb7c734dbc547096c13beff08ee991015b2baca41310ca816759df8f76dba9b997afedc76ebef3840b7df442af8671032fff7b7aace0fa2f3279728c90b601152f0c9d4513362c1a8fa8baa33e01ea1353c7265e65f4fa3d3382547aba190cff6104f0715fd3552ab5ee314850d34f0abf990c478e95b064634718542e637d30d27cf2804cd5baa8c83a68c03fac327227b8c0103e3c3"])
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffeffff)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
clone3(&(0x7f0000001b00)={0x100, &(0x7f0000001840)=<r2=>0xffffffffffffffff, &(0x7f0000001880), &(0x7f00000018c0), {0x12}, &(0x7f0000001900)=""/227, 0xe3, &(0x7f0000001a00)=""/184, &(0x7f0000001ac0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r1}}, 0x58)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000001b80)={0x0, 0x10000, 0x10001})
recvmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000140), 0x6e, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/3, 0x3}, {&(0x7f0000001200)=""/96, 0x60}, {&(0x7f0000001740)=""/239, 0xef}, {&(0x7f0000001380)=""/76, 0x4c}, {&(0x7f0000001400)=""/70, 0x46}, {&(0x7f0000001480)=""/221, 0xdd}, {&(0x7f0000001580)=""/159, 0x9f}], 0x8, &(0x7f0000001c80)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)
get_thread_area(0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
r5 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
pwrite64(r5, &(0x7f0000001c00)="414f6b5ba9443456ce8a2a098708d23f9f03e8d4a7a6a16968a6d3c64e7ad4557068416816172ed3eb24f5d3e390684679fda167099ee4dee26a2c38d6735306885d40c11744", 0x46, 0x8)
ioctl$FIONCLEX(r4, 0x5450)

[ 1430.448828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1430.454386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1430.477682] loop1: detected capacity change from 0 to 2048
[ 1430.488607] EXT4-fs (loop1): unsupported descriptor size 0
[ 1430.520758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1430.538416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:35:23 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xe000000, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:35:23 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x1000, 0x1f, 0x81, 0x2}]})

11:35:23 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)
r1 = fsmount(0xffffffffffffffff, 0x0, 0x0)
set_thread_area(&(0x7f0000000180)={0x5, 0x0, 0x4000, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1})
r2 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
r3 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ppoll(&(0x7f0000000080)=[{r0, 0x8}, {r1}, {r2, 0x40}, {r3, 0x141}, {r4, 0x80}, {r0, 0x8140}, {r0, 0x480}], 0x7, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x5]}, 0x8)

11:35:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:35:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x0, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x33)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:35:23 executing program 7:
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x0, @dev}})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})
r2 = getegid()
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000500)={{0x2, 0x0, r2, 0x0, r2, 0x10, 0x401}, 0x0, 0x0, 0xfff, 0x20, 0x2, 0x65210bb5, 0x0, 0xf2, 0x2, 0xfff, 0xffffffffffffffff, 0xffffffffffffffff})

11:35:23 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800030000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000091d325d6000000000000000000000000000000000000000000000000ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001008000000000000800010000000af30100040000000000000000000000010000006000000000000000000000000000000000000000000000000000000000000000000000000000000057bbaa66000000000000000000000000000000000000000000000000ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3736383832343338342f66696c65302f66696c653000000000000000000000000000000000000000000000596e6dde000000000000000000000000000000000000000000000000ed8100000a000000d5f4655fd5f4655fd5f4655f00000000000001000001000000000800010000000af301000400000000000000000000000100000070", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:35:23 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001cc0)=ANY=[@ANYBLOB="7cc926914c6131b7f1b3e2e6", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="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"])
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffeffff)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
clone3(&(0x7f0000001b00)={0x100, &(0x7f0000001840)=<r2=>0xffffffffffffffff, &(0x7f0000001880), &(0x7f00000018c0), {0x12}, &(0x7f0000001900)=""/227, 0xe3, &(0x7f0000001a00)=""/184, &(0x7f0000001ac0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r1}}, 0x58)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000001b80)={0x0, 0x10000, 0x10001})
recvmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000140), 0x6e, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/3, 0x3}, {&(0x7f0000001200)=""/96, 0x60}, {&(0x7f0000001740)=""/239, 0xef}, {&(0x7f0000001380)=""/76, 0x4c}, {&(0x7f0000001400)=""/70, 0x46}, {&(0x7f0000001480)=""/221, 0xdd}, {&(0x7f0000001580)=""/159, 0x9f}], 0x8, &(0x7f0000001c80)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)
get_thread_area(0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
r5 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
pwrite64(r5, &(0x7f0000001c00)="414f6b5ba9443456ce8a2a098708d23f9f03e8d4a7a6a16968a6d3c64e7ad4557068416816172ed3eb24f5d3e390684679fda167099ee4dee26a2c38d6735306885d40c11744", 0x46, 0x8)
ioctl$FIONCLEX(r4, 0x5450)

[ 1439.214798] loop1: detected capacity change from 0 to 2048
[ 1439.224422] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[ 1439.225655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1439.226857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1439.232112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1439.234105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:35:23 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1439.301498] loop1: detected capacity change from 0 to 2048
[ 1439.305264] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
11:35:23 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
getegid()

11:35:24 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:35:24 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001cc0)=ANY=[@ANYBLOB="7cc926914c6131b7f1b3e2e6", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="7f00008200006570000007000000946fb23c9c323203c829e7841723231ba2a5ac2e631321447c86ee6e65f85afe218a1e07cfb4cbab30519f8e2f623c77be68db543157a47ca8c77bb1bcb16fda282f018a478214355cad56f91a8e1a925f0eef33c9ea6d0c1b9e97e2b648d04a943dfd1525eb053f3d351dea36c617546f1a680f1dd6902ade062bc874be55f760624010bcbf76183b7c2035489217a6cb67d15b29a8ab5f7c715e388dacc8f22022317d3a965b19d6b0ddf2fac95052fd2f407da9f4524a6d80c42704cd729a4e293fae00c23ae30c26ad1480202ac9d172e04eb67a8f4e6b9347d6e412b599dc6e6f8da85f67922677c7339b9e373dd2b49eb7c734dbc547096c13beff08ee991015b2baca41310ca816759df8f76dba9b997afedc76ebef3840b7df442af8671032fff7b7aace0fa2f3279728c90b601152f0c9d4513362c1a8fa8baa33e01ea1353c7265e65f4fa3d3382547aba190cff6104f0715fd3552ab5ee314850d34f0abf990c478e95b064634718542e637d30d27cf2804cd5baa8c83a68c03fac327227b8c0103e3c3"])
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffeffff)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
clone3(&(0x7f0000001b00)={0x100, &(0x7f0000001840)=<r2=>0xffffffffffffffff, &(0x7f0000001880), &(0x7f00000018c0), {0x12}, &(0x7f0000001900)=""/227, 0xe3, &(0x7f0000001a00)=""/184, &(0x7f0000001ac0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r1}}, 0x58)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000001b80)={0x0, 0x10000, 0x10001})
recvmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000140), 0x6e, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/3, 0x3}, {&(0x7f0000001200)=""/96, 0x60}, {&(0x7f0000001740)=""/239, 0xef}, {&(0x7f0000001380)=""/76, 0x4c}, {&(0x7f0000001400)=""/70, 0x46}, {&(0x7f0000001480)=""/221, 0xdd}, {&(0x7f0000001580)=""/159, 0x9f}], 0x8, &(0x7f0000001c80)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)
get_thread_area(0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
r5 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
pwrite64(r5, &(0x7f0000001c00)="414f6b5ba9443456ce8a2a098708d23f9f03e8d4a7a6a16968a6d3c64e7ad4557068416816172ed3eb24f5d3e390684679fda167099ee4dee26a2c38d6735306885d40c11744", 0x46, 0x8)
ioctl$FIONCLEX(r4, 0x5450)

11:35:24 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x2000000000000107, &(0x7f0000000000)=[{0x803, 0x5, 0x2, 0xffff8001}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:35:24 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x30000000, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1439.391295] loop1: detected capacity change from 0 to 2048
[ 1439.399254] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
11:35:24 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001cc0)=ANY=[@ANYBLOB="7cc926914c6131b7f1b3e2e6", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="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"])
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffeffff)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
clone3(&(0x7f0000001b00)={0x100, &(0x7f0000001840)=<r2=>0xffffffffffffffff, &(0x7f0000001880), &(0x7f00000018c0), {0x12}, &(0x7f0000001900)=""/227, 0xe3, &(0x7f0000001a00)=""/184, &(0x7f0000001ac0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r1}}, 0x58)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000001b80)={0x0, 0x10000, 0x10001})
recvmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000140), 0x6e, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/3, 0x3}, {&(0x7f0000001200)=""/96, 0x60}, {&(0x7f0000001740)=""/239, 0xef}, {&(0x7f0000001380)=""/76, 0x4c}, {&(0x7f0000001400)=""/70, 0x46}, {&(0x7f0000001480)=""/221, 0xdd}, {&(0x7f0000001580)=""/159, 0x9f}], 0x8, &(0x7f0000001c80)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)
get_thread_area(0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r4 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
pwrite64(r4, &(0x7f0000001c00)="414f6b5ba9443456ce8a2a098708d23f9f03e8d4a7a6a16968a6d3c64e7ad4557068416816172ed3eb24f5d3e390684679fda167099ee4dee26a2c38d6735306885d40c11744", 0x46, 0x8)

11:35:24 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1439.501671] loop1: detected capacity change from 0 to 2048
11:35:24 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x3, 0x8, &(0x7f0000001500)=[{&(0x7f0000000180)="b5579d49e474a37bdaa7948d26043c32f99d76ce52fe99ea91f7fec3d54e8d11008e177dc9d9bcae611496c753ed6927e8ae8a6a7147266ddc43a44374e2071f832d6e9d2bd905cdf13662b13cb4654750ba572c4b2756550194e784541daf1956bfb4d871", 0x65, 0x5}, {&(0x7f0000000200)="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", 0x1000, 0x1}, {&(0x7f0000001200)="2d62277798efd50d73c3a3039ddf0c92b26a13262f2211be948f2dd2fc30a62ef5369720e4217f85e50b4c8ec5985bd38d4a5264aa5f68551fa6bc49a6cb162a4a7cd3fadf865492c83b20cac75111cd48e59b1ad9b8ec167d5b7bec44c6c9a0600534c51e4ec3240609e5c00ac2d43cfca2ca", 0x73, 0x6}, {&(0x7f0000001280)="f970d00c8e1f246e7e35876b3d1697cbbb4451be325074a0d7791e13c02a3f6f8fd0719709d04c640a8c0252760674bace0278487e67f9ecbda8657ad03e331956f4b4d878e0906bd905548843c22cb54fa913b12cf051489fa70a97c46d59285f73f781f87f8eac147907acc4d1684ae802abc9fd7243936c3b4ed2c81afff01ba2dc10392b35bc1a873004250e2d4fd957f4ab5876eb1259dde53c0eaac33740432548a4d21e1ff02e0a1ba5d9768d46e41822977dcd32258c2f0a2ac0391c04d4fcdd6b6d62c6f00c6ad503e43d354c04888f433dce", 0xd7, 0x5}, {&(0x7f0000001380)="ec6afff8741a2357afbd5afd6ffb22f77eb429815d2351bfc2674b85999e18ed8a02e51954be7513e795bb6ee97ccd726b22abeb", 0x34, 0xffff}, {&(0x7f00000013c0)="0813d361f2528b63ad4ca4", 0xb, 0x798}, {&(0x7f0000001400)="ffa1ac7828156ad4a5beab4cad14db070b995ee287ffca4edf464fffc3ccc86ad126bd0de71c5d5cf0e62dbe19c2232929ade6dd5773e1b83f6c57d91053614a61817bf7b6d9b62dcdac6c90731791103c52e18e55859a84633fb45a298dc005a7e7bbbda8533edc0b76cff8ee2b313d34a4c49ef535640634d5dbca7e8b9fde5f4a61219cbc64246f96d7c09c349291a0f16e222d14", 0x96, 0x7}, {&(0x7f00000014c0)="7d12697766b33b4eb8bf19996f6277c79e9ed7271ced220270a0f5687fd0f07dc3f78f6d9cd880add6c2c2e4892080b9b686ac8626b1045246f6598730a719", 0x3f, 0xc8f}], 0x1000080, &(0x7f00000015c0)={[{@utf8}, {@fat=@errors_remount}, {@utf8no}, {@uni_xlate}, {@shortname_win95}, {@numtail}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x62, 0x32, 0x38, 0x39, 0x31, 0x38, 0x66], 0x2d, [0x53, 0x38, 0x31, 0x62], 0x2d, [0x33, 0x66, 0x31, 0x33], 0x2d, [0x6e, 0x64, 0x31, 0x62], 0x2d, [0x7e, 0x65, 0x61, 0x38, 0x65, 0x65, 0x37, 0x35]}}}]})
fallocate(r0, 0x0, 0x3ff, 0x6)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x800, 0xa8, 0x7f, 0x8}, {0x3ff, 0x1, 0x7f, 0xb06}, {0x0, 0x7f}, {0x401, 0x5a, 0x81, 0x1500}]})

11:35:24 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xd08b669bbd9548f2, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x0, 0x4, 0xf8, 0x7fff0000}, {0x8, 0x1, 0x3, 0x5}]})
r0 = getegid()
r1 = getgid()
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r3=>0x0}, &(0x7f0000008600)=0xc)
setregid(r3, 0x0)
r4 = getegid()
setgroups(0x7, &(0x7f0000000000)=[r0, r0, r0, r1, r3, r4, r0])
ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0xee00)

[ 1439.539513] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[ 1439.579624] loop5: detected capacity change from 0 to 255
[ 1439.598884] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
11:35:32 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x400901, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x170, r1, 0x200, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x170}, 0x1, 0x0, 0x0, 0x81}, 0x4000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)

11:35:32 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x8, 0x0, 0x0, 0x7fff0002}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x4, @remote}, 0x1c)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff)
inotify_add_watch(r1, 0x0, 0x500)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000100)=""/143, 0x8f})
r3 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, r2)
ioctl$LOOP_SET_FD(r3, 0x4c00, 0xffffffffffffffff)

11:35:32 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:35:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x0, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x33)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:35:32 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x60000000, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:35:32 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:35:32 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001cc0)=ANY=[@ANYBLOB="7cc926914c6131b7f1b3e2e6", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="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"])
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffeffff)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
clone3(&(0x7f0000001b00)={0x100, &(0x7f0000001840)=<r2=>0xffffffffffffffff, &(0x7f0000001880), &(0x7f00000018c0), {0x12}, &(0x7f0000001900)=""/227, 0xe3, &(0x7f0000001a00)=""/184, &(0x7f0000001ac0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r1}}, 0x58)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000001b80)={0x0, 0x10000, 0x10001})
recvmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000140), 0x6e, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/3, 0x3}, {&(0x7f0000001200)=""/96, 0x60}, {&(0x7f0000001740)=""/239, 0xef}, {&(0x7f0000001380)=""/76, 0x4c}, {&(0x7f0000001400)=""/70, 0x46}, {&(0x7f0000001480)=""/221, 0xdd}, {&(0x7f0000001580)=""/159, 0x9f}], 0x8, &(0x7f0000001c80)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)
get_thread_area(0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r4 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)

11:35:32 executing program 7:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = getegid()
setfsgid(r1)

[ 1447.633734] loop1: detected capacity change from 0 to 2048
[ 1447.638302] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[ 1447.638959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1447.641161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:35:32 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1447.699345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1447.718572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1447.738273] loop1: detected capacity change from 0 to 2048
11:35:32 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x51)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x5d)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getegid()

[ 1447.750600] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
11:35:32 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x7ffffff7, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:35:32 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001cc0)=ANY=[@ANYBLOB="7cc926914c6131b7f1b3e2e6", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="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"])
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffeffff)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
clone3(&(0x7f0000001b00)={0x100, &(0x7f0000001840)=<r2=>0xffffffffffffffff, &(0x7f0000001880), &(0x7f00000018c0), {0x12}, &(0x7f0000001900)=""/227, 0xe3, &(0x7f0000001a00)=""/184, &(0x7f0000001ac0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r1}}, 0x58)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000001b80)={0x0, 0x10000, 0x10001})
recvmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000140), 0x6e, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/3, 0x3}, {&(0x7f0000001200)=""/96, 0x60}, {&(0x7f0000001740)=""/239, 0xef}, {&(0x7f0000001380)=""/76, 0x4c}, {&(0x7f0000001400)=""/70, 0x46}, {&(0x7f0000001480)=""/221, 0xdd}, {&(0x7f0000001580)=""/159, 0x9f}], 0x8, &(0x7f0000001c80)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)
get_thread_area(0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)

11:35:32 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfe, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:35:32 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1447.847742] loop1: detected capacity change from 0 to 2048
[ 1447.858328] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
11:35:32 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r1=>0x0}, &(0x7f0000000080)=0xc)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002f00)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000200)=""/170, 0xaa}], 0x2, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r2=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f0000000440), 0x6e, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/98, 0x62}, {&(0x7f0000000540)=""/12, 0xc}, {&(0x7f0000000580)=""/122, 0x7a}], 0x3, &(0x7f0000000640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f00000006c0), 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000740)=""/125, 0x7d}], 0x1}}, {{&(0x7f0000000800)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000880)}, {&(0x7f00000008c0)=""/51, 0x33}], 0x2, &(0x7f0000000940)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000009c0)=""/169, 0xa9}, {&(0x7f0000000a80)=""/158, 0x9e}, {&(0x7f0000000b40)=""/25, 0x19}, {&(0x7f0000000b80)=""/148, 0x94}, {&(0x7f0000000c40)=""/255, 0xff}, {&(0x7f0000000d40)=""/107, 0x6b}], 0x6, &(0x7f0000000e40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x40}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000e80)=""/213, 0xd5}, {&(0x7f0000000f80)=""/200, 0xc8}, {&(0x7f0000001080)=""/243, 0xf3}, {&(0x7f0000001180)=""/42, 0x2a}, {&(0x7f00000011c0)=""/8, 0x8}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/241, 0xf1}, {&(0x7f0000002300)=""/227, 0xe3}, {&(0x7f0000002400)=""/236, 0xec}], 0x9, &(0x7f00000025c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, <r3=>0x0, <r4=>0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000002680)=@abs, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002700)=""/211, 0xd3}, {&(0x7f0000002800)=""/145, 0x91}, {&(0x7f00000028c0)=""/149, 0x95}, {&(0x7f0000002980)=""/44, 0x2c}, {&(0x7f00000029c0)=""/40, 0x28}, {&(0x7f0000002a00)=""/130, 0x82}, {&(0x7f0000002ac0)=""/204, 0xcc}, {&(0x7f0000002bc0)=""/135, 0x87}, {&(0x7f0000002c80)=""/197, 0xc5}], 0x9, &(0x7f0000002e40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}], 0x7, 0x0, 0x0)
mount$9p_rdma(&(0x7f0000000100), &(0x7f0000000880)='./file0\x00', &(0x7f0000003180), 0x100000, &(0x7f00000031c0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@common=@access_user}, {@sq}, {@common=@cache_fscache}, {@sq={'sq', 0x3d, 0x81}}, {@sq={'sq', 0x3d, 0x5}}], [{@fsmagic={'fsmagic', 0x3d, 0xa15}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@euid_gt={'euid>', r2}}, {@uid_lt={'uid<', r3}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x65, 0x62, 0x62, 0x65, 0x31, 0x30, 0x61], 0x2d, [0x36, 0x30, 0x37, 0x66], 0x2d, [0x31, 0x31, 0x5, 0x61], 0x2d, [0x31, 0x38, 0x61, 0x39], 0x2d, [0x62, 0x38, 0x65, 0x6a, 0x66, 0x64, 0x34, 0x34]}}}]}})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000030c0)={0x0, 0x0, <r5=>0x0}, &(0x7f0000003100)=0xc)
setgroups(0x6, &(0x7f0000003140)=[r1, r4, 0xee01, r0, r5, 0x0])

11:35:32 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0xffff, 0x88, 0x4, 0x3}, {0x18, 0x92, 0x0, 0x7}, {0x9, 0x6, 0x1, 0x3}, {0x7ff, 0x7b, 0x5}]})
get_thread_area(0x0)
modify_ldt$write(0x1, &(0x7f0000000040)={0x3, 0x20001000, 0x400, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)})

11:35:32 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:35:40 executing program 5:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
fsmount(r0, 0x0, 0x80)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)

11:35:40 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:35:40 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001cc0)=ANY=[@ANYBLOB="7cc926914c6131b7f1b3e2e6", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="7f00008200006570000007000000946fb23c9c323203c829e7841723231ba2a5ac2e631321447c86ee6e65f85afe218a1e07cfb4cbab30519f8e2f623c77be68db543157a47ca8c77bb1bcb16fda282f018a478214355cad56f91a8e1a925f0eef33c9ea6d0c1b9e97e2b648d04a943dfd1525eb053f3d351dea36c617546f1a680f1dd6902ade062bc874be55f760624010bcbf76183b7c2035489217a6cb67d15b29a8ab5f7c715e388dacc8f22022317d3a965b19d6b0ddf2fac95052fd2f407da9f4524a6d80c42704cd729a4e293fae00c23ae30c26ad1480202ac9d172e04eb67a8f4e6b9347d6e412b599dc6e6f8da85f67922677c7339b9e373dd2b49eb7c734dbc547096c13beff08ee991015b2baca41310ca816759df8f76dba9b997afedc76ebef3840b7df442af8671032fff7b7aace0fa2f3279728c90b601152f0c9d4513362c1a8fa8baa33e01ea1353c7265e65f4fa3d3382547aba190cff6104f0715fd3552ab5ee314850d34f0abf990c478e95b064634718542e637d30d27cf2804cd5baa8c83a68c03fac327227b8c0103e3c3"])
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffeffff)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
clone3(&(0x7f0000001b00)={0x100, &(0x7f0000001840)=<r2=>0xffffffffffffffff, &(0x7f0000001880), &(0x7f00000018c0), {0x12}, &(0x7f0000001900)=""/227, 0xe3, &(0x7f0000001a00)=""/184, &(0x7f0000001ac0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r1}}, 0x58)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000001b80)={0x0, 0x10000, 0x10001})
recvmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000140), 0x6e, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/3, 0x3}, {&(0x7f0000001200)=""/96, 0x60}, {&(0x7f0000001740)=""/239, 0xef}, {&(0x7f0000001380)=""/76, 0x4c}, {&(0x7f0000001400)=""/70, 0x46}, {&(0x7f0000001480)=""/221, 0xdd}, {&(0x7f0000001580)=""/159, 0x9f}], 0x8, &(0x7f0000001c80)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)
get_thread_area(0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000001bc0)={{0x1, 0x1, 0x18, r3}, './file0\x00'})

11:35:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x33)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:35:40 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xaa95010b, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:35:40 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:35:40 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0xa, &(0x7f0000000000)=[{0xfff9, 0xa3, 0x4e, 0x6}, {0xaef0, 0x1, 0x20, 0x9f83}, {0x0, 0x2, 0x6, 0x2}, {0x8, 0x4, 0x20, 0x4}, {0x3, 0x6, 0x81, 0x1c000}, {0x6, 0x1, 0x6f, 0x9}, {0x7f, 0x2, 0x0, 0x80000001}, {0x3ff, 0x1f, 0x7, 0x1}, {0xd369, 0x2, 0x6, 0x2}, {0x1, 0x7f, 0x81, 0x5}]})
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x5, 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:35:40 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
getegid()

[ 1455.747250] loop1: detected capacity change from 0 to 2048
[ 1455.752077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1455.752972] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[ 1455.756727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:35:40 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f465", 0x33, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1455.792054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1455.799205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:35:40 executing program 2:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x20000000000000ff, &(0x7f0000000080)=[{0x6, 0x0, 0xf3}, {0x5, 0x5, 0xc4, 0xfff}]})
open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_fh={0x8, 0x1, {0x279}}, 0x20000)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:35:40 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getegid()
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/virtio_pci_modern_dev', 0x591300, 0x41)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0xc1, 0xb4, 0x7, 0x8}, {0x8, 0x7, 0x80}, {0x1f, 0x0, 0x4}, {0x20, 0x1, 0x1, 0x7}, {0x1ff, 0x1, 0x5, 0x6}]})
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='{]]@\x00', 0x0, r0)

[ 1455.835845] loop1: detected capacity change from 0 to 2048
11:35:40 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001cc0)=ANY=[@ANYBLOB="7cc926914c6131b7f1b3e2e6", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="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"])
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffeffff)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
clone3(&(0x7f0000001b00)={0x100, &(0x7f0000001840)=<r2=>0xffffffffffffffff, &(0x7f0000001880), &(0x7f00000018c0), {0x12}, &(0x7f0000001900)=""/227, 0xe3, &(0x7f0000001a00)=""/184, &(0x7f0000001ac0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r1}}, 0x58)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000001b80)={0x0, 0x10000, 0x10001})
recvmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000140), 0x6e, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/3, 0x3}, {&(0x7f0000001200)=""/96, 0x60}, {&(0x7f0000001740)=""/239, 0xef}, {&(0x7f0000001380)=""/76, 0x4c}, {&(0x7f0000001400)=""/70, 0x46}, {&(0x7f0000001480)=""/221, 0xdd}, {&(0x7f0000001580)=""/159, 0x9f}], 0x8, &(0x7f0000001c80)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)
get_thread_area(0x0)

[ 1455.842364] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
11:35:40 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xac140100, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:35:40 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f465", 0x33, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800030000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000091d325d6000000000000000000000000000000000000000000000000ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001008000000000000800010000000af30100040000000000000000000000010000006000000000000000000000000000000000000000000000000000000000000000000000000000000057bbaa66000000000000000000000000000000000000000000000000ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3736383832343338342f66696c65302f66696c653000000000000000000000000000000000000000000000596e6dde000000000000000000000000000000000000000000000000ed8100000a000000d5f4655fd5f4655fd5f4655f00000000000001000001000000000800010000000af301000400000000000000000000000100000070", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:35:40 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001cc0)=ANY=[@ANYBLOB="7cc926914c6131b7f1b3e2e6", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="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"])
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffeffff)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
clone3(&(0x7f0000001b00)={0x100, &(0x7f0000001840)=<r2=>0xffffffffffffffff, &(0x7f0000001880), &(0x7f00000018c0), {0x12}, &(0x7f0000001900)=""/227, 0xe3, &(0x7f0000001a00)=""/184, &(0x7f0000001ac0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r1}}, 0x58)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000001b80)={0x0, 0x10000, 0x10001})
recvmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000140), 0x6e, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/3, 0x3}, {&(0x7f0000001200)=""/96, 0x60}, {&(0x7f0000001740)=""/239, 0xef}, {&(0x7f0000001380)=""/76, 0x4c}, {&(0x7f0000001400)=""/70, 0x46}, {&(0x7f0000001480)=""/221, 0xdd}, {&(0x7f0000001580)=""/159, 0x9f}], 0x8, &(0x7f0000001c80)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

11:35:40 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xae930000, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:35:40 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100))

[ 1456.006775] loop1: detected capacity change from 0 to 2048
[ 1456.016997] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[ 1464.402069] loop1: detected capacity change from 0 to 2048
11:35:49 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:35:49 executing program 2:
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/154, 0x9a}, {&(0x7f0000000240)=""/128, 0x80}, {&(0x7f0000000000)=""/55, 0x37}, {&(0x7f00000002c0)=""/199, 0xc7}, {&(0x7f00000003c0)=""/155, 0x9b}, {&(0x7f0000000480)=""/72, 0x48}, {&(0x7f0000000500)=""/173, 0xad}], 0x7, &(0x7f0000000640)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r0=>0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x2020)
newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x400)
keyctl$chown(0x4, 0x0, r0, r1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:35:49 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0xe7d8}]})
get_thread_area(0x0)

11:35:49 executing program 7:
recvfrom(0xffffffffffffffff, &(0x7f0000000100)=""/4096, 0x1000, 0x8000a162, &(0x7f0000001100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x74b4d1de, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3ff}}, 0x80)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getegid()

11:35:49 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xeffdffff, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:35:49 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001cc0)=ANY=[@ANYBLOB="7cc926914c6131b7f1b3e2e6", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="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"])
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffeffff)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
clone3(&(0x7f0000001b00)={0x100, &(0x7f0000001840)=<r2=>0xffffffffffffffff, &(0x7f0000001880), &(0x7f00000018c0), {0x12}, &(0x7f0000001900)=""/227, 0xe3, &(0x7f0000001a00)=""/184, &(0x7f0000001ac0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r1}}, 0x58)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000001b80)={0x0, 0x10000, 0x10001})
recvmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000140), 0x6e, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/3, 0x3}, {&(0x7f0000001200)=""/96, 0x60}, {&(0x7f0000001740)=""/239, 0xef}, {&(0x7f0000001380)=""/76, 0x4c}, {&(0x7f0000001400)=""/70, 0x46}, {&(0x7f0000001480)=""/221, 0xdd}, {&(0x7f0000001580)=""/159, 0x9f}], 0x8, &(0x7f0000001c80)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30}, 0x0)
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

11:35:49 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f465", 0x33, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800030000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000091d325d6000000000000000000000000000000000000000000000000ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001008000000000000800010000000af30100040000000000000000000000010000006000000000000000000000000000000000000000000000000000000000000000000000000000000057bbaa66000000000000000000000000000000000000000000000000ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3736383832343338342f66696c65302f66696c653000000000000000000000000000000000000000000000596e6dde000000000000000000000000000000000000000000000000ed8100000a000000d5f4655fd5f4655fd5f4655f00000000000001000001000000000800010000000af301000400000000000000000000000100000070", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:35:49 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x33)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

[ 1464.405911] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[ 1464.443751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1464.449591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:35:49 executing program 2:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x20, 0x3f, 0x9}, {0x40, 0x68, 0xc0, 0x80000000}, {0x5, 0x0, 0xf5, 0x5}, {0x8000, 0x9, 0x81, 0x2}, {0x7, 0x2, 0x8, 0x10000}, {0x8, 0x7f, 0x3, 0xf38f}]})
write(r0, &(0x7f0000000100)="ecf5cc46e71836ef00b70841d6c9596c9ef838aedd2e2189eb9b68abf61c8fcfd7952e51a104eb38e90a34223fb1fed3b02ba927bdb51c1be05ed849560afdbb8de0509fcef08735574cefcae09cfc348ce31dc92d5be1a4c7fd8d441a", 0x5d)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x2000450)

11:35:49 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1464.482894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1464.485207] audit: type=1326 audit(1751196949.140:89): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=19169 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec42a85b19 code=0x0
[ 1464.500181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:35:49 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000000)={0xa, &(0x7f0000000100)=[{0x1400, 0x1, 0x4, 0x7}, {0x7d8, 0x7, 0x1, 0x1ff}, {0x0, 0x0, 0x3, 0x3f}, {0x8000, 0x20, 0x4, 0x2}, {0x5, 0x7f, 0x9, 0x5}, {0x200, 0x3, 0x8, 0x4}, {0x401, 0x63, 0xff}, {0xa8d, 0x5, 0x8, 0xfffffffe}, {0xcb9, 0x80, 0x5, 0x2}, {0xf38c, 0x1, 0x4, 0x8000}]})
getegid()
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x8, &(0x7f0000000080)=[{0xcfd7, 0xd8, 0x1, 0x4}, {0x0, 0x95, 0x3f, 0x8001}, {0xfffb, 0x40, 0x32, 0xe}, {0x9, 0x28, 0x9, 0x400}, {0x3d9, 0x1, 0x18, 0x2}, {0xb9, 0x1, 0x0, 0x9}, {0xffff, 0x1, 0x7f, 0x7}, {0x800, 0x81, 0x7, 0xffffffff}]})

11:35:49 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001cc0)=ANY=[@ANYBLOB="7cc926914c6131b7f1b3e2e6", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="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"])
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffeffff)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
clone3(&(0x7f0000001b00)={0x100, &(0x7f0000001840)=<r2=>0xffffffffffffffff, &(0x7f0000001880), &(0x7f00000018c0), {0x12}, &(0x7f0000001900)=""/227, 0xe3, &(0x7f0000001a00)=""/184, &(0x7f0000001ac0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r1}}, 0x58)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000001b80)={0x0, 0x10000, 0x10001})
recvmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000140), 0x6e, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/3, 0x3}, {&(0x7f0000001200)=""/96, 0x60}, {&(0x7f0000001740)=""/239, 0xef}, {&(0x7f0000001380)=""/76, 0x4c}, {&(0x7f0000001400)=""/70, 0x46}, {&(0x7f0000001480)=""/221, 0xdd}, {&(0x7f0000001580)=""/159, 0x9f}], 0x8, &(0x7f0000001c80)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30}, 0x0)
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

[ 1464.538245] loop1: detected capacity change from 0 to 2048
[ 1464.548916] EXT4-fs (loop1): invalid first ino: 0
11:35:49 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xf7ffff7f, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:35:49 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1464.618161] loop1: detected capacity change from 0 to 2048
11:35:49 executing program 7:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
fgetxattr(r0, &(0x7f0000000000)=@random={'security.', '{\x00'}, &(0x7f0000000100)=""/148, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f00000001c0)={0x3a5, 0xffffffffffffff01, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
getegid()

[ 1464.629380] EXT4-fs (loop1): invalid first ino: 0
[ 1465.293504] audit: type=1326 audit(1751196949.953:90): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=19169 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec42a85b19 code=0x0
11:35:58 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xfc000000, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:35:58 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0xe, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)
set_thread_area(&(0x7f0000000000)={0xcd, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1})

11:35:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x33)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:35:58 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001", 0x4d, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:35:58 executing program 7:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = getegid()
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180))
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f0000000000))
setfsgid(r1)

11:35:58 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:35:58 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001cc0)=ANY=[@ANYBLOB="7cc926914c6131b7f1b3e2e6", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="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"])
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffeffff)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
clone3(&(0x7f0000001b00)={0x100, &(0x7f0000001840)=<r2=>0xffffffffffffffff, &(0x7f0000001880), &(0x7f00000018c0), {0x12}, &(0x7f0000001900)=""/227, 0xe3, &(0x7f0000001a00)=""/184, &(0x7f0000001ac0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r1}}, 0x58)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000001b80)={0x0, 0x10000, 0x10001})
recvmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000140), 0x6e, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/3, 0x3}, {&(0x7f0000001200)=""/96, 0x60}, {&(0x7f0000001740)=""/239, 0xef}, {&(0x7f0000001380)=""/76, 0x4c}, {&(0x7f0000001400)=""/70, 0x46}, {&(0x7f0000001480)=""/221, 0xdd}, {&(0x7f0000001580)=""/159, 0x9f}], 0x8, &(0x7f0000001c80)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x30}, 0x0)
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

11:35:58 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0x8, &(0x7f0000000000)=[{0x7ff, 0x8, 0x7, 0xd4b6}, {0x9e, 0x0, 0xfa, 0x4}, {0x8, 0x5, 0x3, 0x80000001}, {0x3ff, 0x9, 0x0, 0xde}, {0x29b1, 0xfe, 0xa, 0x3}, {0x80, 0x4, 0x3, 0x645}, {0x3, 0x9, 0x81, 0x8}, {0x7, 0x4, 0x6, 0x2}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x7, 0x80, 0x3f, 0x2}, {0x3ff, 0x40, 0xa0, 0x101}, {0x2, 0x5, 0xc9, 0x7ff}, {0x1, 0x0, 0x3, 0x4}, {0x7, 0x8, 0x3, 0x7fffffff}, {0x74, 0x6, 0xe3, 0x6}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:35:58 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xfe800000, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:35:58 executing program 2:
mq_timedreceive(0xffffffffffffffff, &(0x7f0000000100)=""/212, 0xd4, 0x8, &(0x7f0000000000)={0x77359400})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000200)={0x1, &(0x7f0000000080)=[{0x7f, 0x3, 0x4, 0x43a0}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

[ 1473.915920] loop1: detected capacity change from 0 to 2048
[ 1473.935998] EXT4-fs (loop1): invalid first ino: 0
[ 1473.942301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1473.947911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1473.956713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1473.967835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:35:58 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0xcb23838fef39040d, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0xff, 0x1f, 0x3c, 0x1}, {0x1000, 0x8, 0x3, 0x3}]})

11:36:07 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000", 0x5a, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:36:07 executing program 2:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0)
fcntl$dupfd(r1, 0x0, r0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000240)

11:36:07 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x32)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:36:07 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:36:07 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xfec00000, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:36:07 executing program 5:
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x69, 0x2, {0x8, 0x2}}, 0x14)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)

11:36:07 executing program 7:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getegid()
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x2}}, './file0\x00'})
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
sendfile(r1, r2, &(0x7f0000000100)=0x9b, 0x10001)

11:36:07 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001cc0)=ANY=[@ANYBLOB="7cc926914c6131b7f1b3e2e6", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="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"])
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffeffff)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
clone3(&(0x7f0000001b00)={0x100, &(0x7f0000001840)=<r2=>0xffffffffffffffff, &(0x7f0000001880), &(0x7f00000018c0), {0x12}, &(0x7f0000001900)=""/227, 0xe3, &(0x7f0000001a00)=""/184, &(0x7f0000001ac0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r1}}, 0x58)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000001b80)={0x0, 0x10000, 0x10001})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

[ 1482.517140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1482.519018] loop1: detected capacity change from 0 to 2048
[ 1482.519702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:36:07 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xff000000, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1482.539025] EXT4-fs (loop1): fragment/cluster size (65536) != block size (4096)
[ 1482.552122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:36:07 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000", 0x5a, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1482.571818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:36:07 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

[ 1482.598393] loop1: detected capacity change from 0 to 2048
[ 1482.604251] EXT4-fs (loop1): fragment/cluster size (65536) != block size (4096)
11:36:07 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001cc0)=ANY=[@ANYBLOB="7cc926914c6131b7f1b3e2e6", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="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"])
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffeffff)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
clone3(&(0x7f0000001b00)={0x100, &(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0), {0x12}, &(0x7f0000001900)=""/227, 0xe3, &(0x7f0000001a00)=""/184, &(0x7f0000001ac0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r1}}, 0x58)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

11:36:07 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000))
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:36:07 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000", 0x5a, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1482.679548] loop1: detected capacity change from 0 to 2048
11:36:07 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0xfffffdef, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1482.688439] EXT4-fs (loop1): fragment/cluster size (65536) != block size (4096)
11:36:07 executing program 2:
execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000080)=')\xa9\xd3/%@)q#)/\'8}\x00', &(0x7f0000000100)=']/\x00', &(0x7f0000000140)='+),-\x00'], &(0x7f0000000400)=[&(0x7f00000001c0)='\x00', &(0x7f0000000200)='}&*K.:\\-#^^.\x00', &(0x7f0000000240)='{&#&\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='&[\xd5.\'\x00', &(0x7f0000000300)='\x0f#\\M\x00', &(0x7f0000000340)='#\x00', &(0x7f0000000380)=')[}}[}(!@c\x00', &(0x7f00000003c0)='\x00'], 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:36:07 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000", 0x60, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:36:07 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x5, &(0x7f0000000300)=[{0xfb5, 0x4, 0x7, 0x1b}, {0x4, 0x9, 0x4, 0x53}, {0x9, 0x0, 0x7, 0xffffffff}, {0x8, 0xfe, 0x9, 0x1f}, {0x7, 0x67, 0x19, 0x200}]})
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x1ff, 0x1, 0x1d, 0x5}, {0x102, 0xa3, 0x81, 0x10001}, {0x3f, 0xff, 0x83, 0x47d4}]})
get_thread_area(0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f00000001c0))
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x7f, 0x0, 0x47, 0xfffffbff}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0x2, 0x40, 0x2, 0x270}, {0x5, 0xa6, 0x7, 0xbcb}, {0x0, 0x6, 0x1}]})
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x3, 0x81, 0x28, 0x4}, {0x3ff, 0x1, 0x7, 0x4}, {0xd1a4, 0xb, 0xc, 0x2}, {0x4, 0xba, 0x2, 0x5}]})
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x8, 0x20, 0x2, 0x2}, {0x0, 0x7, 0xff, 0xc19e}]})

[ 1482.795877] loop1: detected capacity change from 0 to 2048
[ 1482.804348] EXT4-fs (loop1): fragment/cluster size (65536) != block size (4096)
[ 1483.341396] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1483.342143] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1483.345612] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1483.346188] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1483.349315] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1483.349837] Bluetooth: hci5: Opcode 0x0406 failed: -4
[ 1483.353432] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1483.354434] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1483.356755] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1483.357269] Bluetooth: hci7: Opcode 0x0406 failed: -4
[ 1483.360376] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1483.360912] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1483.363134] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1483.364281] Bluetooth: hci6: Opcode 0x0406 failed: -4
[ 1483.366566] Bluetooth: hci6: Opcode 0x0406 failed: -4
[ 1484.531502] Bluetooth: hci1: command 0x0406 tx timeout
[ 1485.363557] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1485.364067] Bluetooth: hci4: command 0x0406 tx timeout
[ 1485.364538] Bluetooth: hci7: command 0x0406 tx timeout
[ 1485.364919] Bluetooth: hci3: command 0x0406 tx timeout
[ 1485.364980] Bluetooth: hci5: command 0x0406 tx timeout
[ 1485.365970] Bluetooth: hci2: command 0x0406 tx timeout
[ 1486.579553] Bluetooth: hci1: command 0x0406 tx timeout
[ 1487.411728] Bluetooth: hci2: command 0x0406 tx timeout
[ 1487.412780] Bluetooth: hci5: command 0x0406 tx timeout
[ 1487.413359] Bluetooth: hci3: command 0x0406 tx timeout
[ 1487.413791] Bluetooth: hci7: command 0x0406 tx timeout
[ 1487.414938] Bluetooth: hci4: command 0x0406 tx timeout
[ 1487.415999] Bluetooth: hci6: command 0x0c1a tx timeout
[ 1489.459617] Bluetooth: hci6: command 0x0c1a tx timeout
11:36:16 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:36:16 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:36:16 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001cc0)=ANY=[@ANYBLOB="7cc926914c6131b7f1b3e2e6", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="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"])
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffeffff)
openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

11:36:16 executing program 7:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0xfff7, 0x3f, 0x81, 0x1}, {0x4f9, 0xff, 0x0, 0x1}, {0x8001, 0xa3, 0x5, 0x817a0000}, {0x8000, 0x1, 0x7, 0x7}, {0x40, 0x40, 0x38, 0xd}]})
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000400)={0x2, &(0x7f0000000280)=[{0x2, 0x8, 0x4, 0x800}, {0x5, 0x3, 0x1, 0x5}]})
r1 = getegid()
setfsgid(r1)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000340)={0x6, &(0x7f0000000300)=[{0x7, 0x40, 0x6, 0x8}, {0x200, 0x8b, 0x9, 0x3}, {0x2, 0x34, 0xc8, 0x3}, {0x8, 0x7, 0x1, 0xef25}, {0x3ff, 0x9, 0x4, 0x3}, {0x8001, 0x4, 0x5, 0x5}]}, 0x10)
shutdown(0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x400, 0x9, 0x4, 0x3f}, {0xfe00, 0x80, 0x3, 0x2d5}, {0x6, 0xf9, 0x7, 0xfffffbff}, {0xff, 0x23, 0xe6, 0x400}, {0x24a, 0x4, 0x80, 0x7fffffff}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180))
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0x0, 0x200}]}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x6, &(0x7f00000004c0)={0x3, &(0x7f0000000480)=[{0x3, 0x7, 0x5, 0x2}, {0x0, 0x4, 0x4, 0x10001}, {0x3, 0x25, 0x8, 0x2000000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000440)={0x3, &(0x7f00000002c0)=[{0x40, 0x5, 0x34, 0x8}, {0x57d, 0x4, 0x8a, 0x7ff}, {0x2, 0x31, 0x20, 0x8}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x4, &(0x7f0000000380)=[{0x1, 0x7, 0x9, 0x6}, {0x8, 0x7f, 0x1, 0x1}, {0x4b40, 0x7, 0x0, 0x8}, {0xfad6, 0xce, 0x9, 0xffffffff}]})

11:36:16 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000", 0x60, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:36:16 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xbd}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x1, 0x1, 0x7, 0x66}, {0x9, 0x5, 0x75}, {0x9, 0x20, 0xbd, 0x3f}, {0x1ff, 0x3f, 0x0, 0x401}, {0x9, 0xff, 0x5, 0xffff}]})
unlink(&(0x7f0000000100)='./file0\x00')
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x8, &(0x7f00000001c0)=[{0x3, 0x4e, 0xfb, 0x8}, {0x2, 0x6, 0x0, 0x7}, {0x1, 0x8, 0x81, 0x8}, {0x8, 0x48, 0x1, 0x7f}, {0x742, 0x1f, 0x8, 0x4}, {0x7ff, 0x6d, 0x4, 0xffffffff}, {0x3, 0x9, 0x97, 0x7fff}, {0x1ff, 0x3, 0x1f, 0x7304}]})
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x101080, 0x0)
unlinkat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x0)

11:36:16 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x32)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:36:16 executing program 5:
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)

[ 1491.868213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1491.874243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:36:16 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1491.906523] audit: type=1326 audit(1751196976.565:91): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=19613 comm="syz-executor.7" exe="/syz-executor.7" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc601026b19 code=0x0
[ 1491.911586] loop1: detected capacity change from 0 to 2048
[ 1491.933341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1491.936645] EXT4-fs (loop1): fragment/cluster size (65536) != block size (4096)
11:36:16 executing program 5:
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]})
get_thread_area(0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x9, &(0x7f0000000100)=[{0x1, 0x81, 0x7, 0x6}, {0x240, 0x5, 0x2, 0x6}, {0x101, 0x7f, 0xd2, 0x7fff}, {0xffb, 0x2, 0x7f, 0x3f}, {0x7, 0xe5, 0x2, 0x3}, {0x1, 0x2, 0x9, 0x1ff}, {0xe4, 0xc, 0x2}, {0x8, 0xf0, 0x6, 0xe0a5}, {0x0, 0x0, 0x80, 0x4000007}]})
modify_ldt$write(0x1, &(0x7f0000000080)={0x7, 0x100000, 0x6d567a0ac2cadf06, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{0x1ff, 0x9, 0x3, 0x401}, {0xcc8d, 0x1e, 0x2, 0x4}, {0x200, 0x3f, 0x1}, {0x4, 0xf0, 0x8, 0x4}, {0x2, 0x6f, 0x40, 0x40}, {0x6, 0x8, 0x6, 0x401}]})

[ 1491.950706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:36:16 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:36:16 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001cc0)=ANY=[@ANYBLOB="7cc926914c6131b7f1b3e2e6", @ANYRES32=<r0=>0xffffffffffffffff, @ANYBLOB="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"])
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffeffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

11:36:16 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getegid()
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r1}, 0x400, 0xbaca, 0x8})

11:36:16 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffefffc}]})
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
inotify_add_watch(r0, 0x0, 0x800000c4)

11:36:16 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x8, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:36:16 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000", 0x60, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:36:16 executing program 6:
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001cc0)=ANY=[@ANYBLOB="7cc926914c6131b7f1b3e2e6", @ANYRES32, @ANYBLOB="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"])
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

11:36:16 executing program 5:
get_thread_area(0x0)

[ 1492.122593] audit: type=1326 audit(1751196976.780:92): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=19830 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37491f3b19 code=0x7ffe0000
[ 1492.153953] loop1: detected capacity change from 0 to 2048
[ 1492.166192] EXT4-fs (loop1): fragment/cluster size (65536) != block size (4096)
11:36:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:36:25 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x3, 0x3, 0x0, 0x7fff0004}, {0x6, 0xff, 0xbb, 0x400}, {0xbe51, 0xe0, 0x65, 0x5}, {0x5, 0xb, 0x3f, 0xfffffd11}]})
getegid()

11:36:25 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000000)={0x9, &(0x7f0000000100)=[{0xf0, 0xc9, 0xfc, 0xffffeaba}, {0x2, 0x0, 0x6, 0xf26}, {0x6, 0x3, 0x5, 0x2}, {0x9, 0x8, 0x7f}, {0x1, 0xb0, 0x8, 0xd0}, {0x2, 0x6, 0xcb, 0x3f}, {0x200, 0x1, 0x8c, 0x7ff}, {0xfc82, 0x5, 0xb4, 0x3}, {0x2, 0x4, 0x8, 0x2}]})

11:36:25 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500", 0x63, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:36:25 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xb, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:36:25 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

11:36:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x32)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:36:25 executing program 2:
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4000)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)
getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000001c0), &(0x7f0000000200)=0x2)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0xe8dd, 0x3, 0x9, 0x3f}, {0xf4, 0x0, 0x5, 0x10000}, {0x100, 0x0, 0x0, 0x4}, {0x3ff, 0x3, 0xf7, 0x6}]})

[ 1500.680021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1500.686939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:36:25 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xe, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1500.716766] loop1: detected capacity change from 0 to 2048
[ 1500.731327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:36:25 executing program 2:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x7, 0x0, 0x3, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r2, 0x4c00, r0)
r3 = syz_open_dev$vcsu(&(0x7f0000000100), 0x2, 0x4000)
ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000140)={0x6, 0x2855c3dc, 0x1})
symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00')

[ 1500.747011] EXT4-fs (loop1): fragment/cluster size (65536) != block size (4096)
11:36:25 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x8000, 0x9, 0x8, 0x1000}, {0x7fff, 0xff, 0x8f, 0x4}, {0xfff, 0x8, 0x3b, 0x6}, {0xde, 0x9b, 0x5, 0x9ad1}, {0x8001, 0x8, 0x1, 0xdd40}, {0x1000, 0x1a, 0x6, 0x2dbc}]})
get_thread_area(0x0)

[ 1500.767599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:36:25 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

11:36:25 executing program 7:
r0 = getegid()
r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, r0}}, './file0\x00'})

11:36:25 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x30, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:36:25 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500", 0x63, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800030000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000091d325d6000000000000000000000000000000000000000000000000ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001008000000000000800010000000af30100040000000000000000000000010000006000000000000000000000000000000000000000000000000000000000000000000000000000000057bbaa66000000000000000000000000000000000000000000000000ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3736383832343338342f66696c65302f66696c653000000000000000000000000000000000000000000000596e6dde000000000000000000000000000000000000000000000000ed8100000a000000d5f4655fd5f4655fd5f4655f00000000000001000001000000000800010000000af301000400000000000000000000000100000070", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:36:25 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

[ 1500.926087] loop1: detected capacity change from 0 to 2048
[ 1500.929262] EXT4-fs (loop1): fragment/cluster size (65536) != block size (4096)
11:36:33 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x100, 0x91, 0x7, 0x401}]})
get_thread_area(0x0)
get_thread_area(&(0x7f0000000000)={0x5, 0x1000, 0x1000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1})

11:36:33 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:36:33 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

11:36:33 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getegid()
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setgroups(0x2, &(0x7f0000000200)=[r0, r1])

11:36:33 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500", 0x63, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800030000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000091d325d6000000000000000000000000000000000000000000000000ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001008000000000000800010000000af30100040000000000000000000000010000006000000000000000000000000000000000000000000000000000000000000000000000000000000057bbaa66000000000000000000000000000000000000000000000000ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3736383832343338342f66696c65302f66696c653000000000000000000000000000000000000000000000596e6dde000000000000000000000000000000000000000000000000ed8100000a000000d5f4655fd5f4655fd5f4655f00000000000001000001000000000800010000000af301000400000000000000000000000100000070", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:36:33 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x33)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:36:33 executing program 2:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
write(r0, &(0x7f0000000100)="49149ff00c5f300f63cefda65c47d17ffa2cbdd57e2dd1af9e3716fb1984f3e1c79919432589823f794a00c375b509f29149d61940f46ce05e5160b8002098352ddff3a1d105506c566e036d35ba72a83566ddf61460bcef82f84a5e2560a1a886f8a9acafaa2819b0388bb82166a850f528182eb384dce5aaa37041d0991c281968b67e762c", 0x86)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r2 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/snd', 0x109800, 0x100)
r4 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
poll(&(0x7f00000001c0)=[{r1, 0x2020}, {r0, 0x4}, {r2, 0x1000}, {r3, 0x6000}, {r0, 0x8404}, {r0, 0x6}, {r4, 0x404}, {r0, 0x82}], 0x8, 0x6)

11:36:33 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x60, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1509.076680] loop1: detected capacity change from 0 to 2048
[ 1509.083355] EXT4-fs (loop1): fragment/cluster size (65536) != block size (4096)
11:36:33 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

[ 1509.123898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:36:33 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b", 0x65, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:36:33 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xfc, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1509.136854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1509.143176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1509.178300] loop1: detected capacity change from 0 to 2048
11:36:33 executing program 2:
r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0xff]}, 0x8)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000200))
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x81, 0x2, 0x1c, 0x7fff}, {0x7, 0x9, 0x8, 0x5}]})
r2 = signalfd(r1, &(0x7f0000000100)={[0x9]}, 0x8)
r3 = syz_open_dev$usbmon(&(0x7f0000000140), 0xfffffffffffffffe, 0x200000)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

[ 1509.189936] EXT4-fs (loop1): fragment/cluster size (65536) != block size (4096)
11:36:43 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x300, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:36:43 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b", 0x65, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:36:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x33)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:36:43 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

11:36:43 executing program 2:
semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=""/8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:36:43 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x6, 0x0, 0xf8, 0x7fff0000}, {0x7fc, 0x1f, 0x28, 0xf8c}, {0x1, 0x0, 0x20, 0x88}, {0x3ff, 0x1, 0x9, 0xffffffff}]})
get_thread_area(0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000000c0)={0x8, &(0x7f0000000080)=[{0x11f9, 0x20, 0x9, 0x3}, {0x2, 0x6, 0x7, 0xf5}, {0x100, 0x7, 0x0, 0xe83}, {0x9, 0x73, 0x2, 0x3}, {0x1, 0x1, 0x6, 0x4f3e}, {0x7, 0x80, 0x4, 0x5}, {0x8, 0xd9, 0x5, 0x1f}, {0x9, 0x8, 0x1f, 0x80000000}]})

11:36:43 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x1, 0x0, 0xfd, 0x7fff0000}]})
getegid()

11:36:43 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

[ 1518.578192] loop1: detected capacity change from 0 to 2048
[ 1518.587612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1518.590178] EXT4-fs (loop1): fragment/cluster size (65536) != block size (4096)
[ 1518.596715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:36:43 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xb00, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:36:43 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b", 0x65, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:36:43 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

[ 1518.663824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:36:43 executing program 7:
r0 = getegid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, <r1=>0x0}, &(0x7f00000003c0)=0xc)
mount$9p_rdma(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1, &(0x7f0000000400)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x9}}, {@rq={'rq', 0x3d, 0x10000}}, {@rq={'rq', 0x3d, 0x9}}], [{@fowner_lt={'fowner<', r1}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}})
setfsgid(r0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000080)="90c1827017e36d0b391b6646df5505d63a6c11a5ec519e731fea39f948e7338afb34fed850104406621e055439b83f7e983b0e7aac2cd1c03b8080cbdcf8bd2e3cb54da97812afb1fac472e80d27b9cb4478b52dc3a922bdc12afae755a24355fa72cc41b4d2c8ccb7d8289d4b6994cd67c9cb76d38a20cab15c4c", 0x7b, 0x4}, {&(0x7f0000000100)="1c7e332d0fa77e9f8f4fd0e89df26a342888147863838a99f4b80f8dd1eb7e93654d9e4d0c501b28b4bbacf08a84b04bfffa05c58f06f01542512f43a8edaaa7d1a5fbd7cd8e71eb82730d4cf690af0a8b5dc6303d3dc8a0bf40f62a99cdf4163ebddb0d4fe442a8573c90029946d97786425b9cc7a8298c397a578f2a58151816", 0x81, 0x10000}], 0x804, &(0x7f0000000200)=ANY=[@ANYBLOB='data=ordered,nobh,orlov,barrier=0x0000000000000000,usrjquota=,jqfmt=vfsold,nobh,jqfmt=vfsv0,context=system_u,fowner=', @ANYRESDEC, @ANYBLOB="2c6861736d653d292c2c01"])

[ 1518.686324] loop1: detected capacity change from 0 to 2048
[ 1518.693671] EXT4-fs (loop1): fragment/cluster size (65536) != block size (4096)
11:36:43 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x206, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x3, 0xff, 0x3, 0x7}, {0x7, 0xf9, 0x8, 0x400}, {0x0, 0x6b, 0x7, 0x6}, {0x8, 0x79, 0xf8, 0x2b}, {0x7af, 0x1, 0x1, 0x400}, {0x3, 0x1, 0xff, 0x7}]})
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x8, 0x3, 0x4, 0xc993}, {0x7, 0x81, 0x2, 0x80}, {0x6, 0x4, 0x6, 0x3}, {0x3, 0x5, 0x1, 0x3}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
unlink(&(0x7f0000000100)='./file0\x00')

11:36:43 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xe00, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:36:43 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)
get_thread_area(&(0x7f0000000000)={0x4, 0x20001000, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1})

11:36:43 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1518.780724] loop7: detected capacity change from 0 to 256
[ 1518.789254] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[ 1518.792424] audit: type=1326 audit(1751197003.452:93): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=20356 comm="syz-executor.2" exe="/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37491f3b19 code=0x0
[ 1518.794769] loop1: detected capacity change from 0 to 2048
[ 1518.799212] SELinux: security_context_str_to_sid (root) failed with errno=-22
[ 1518.806853] loop7: detected capacity change from 0 to 256
[ 1518.810219] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[ 1518.813210] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
11:36:43 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x3000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:36:43 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

[ 1519.611842] audit: type=1326 audit(1751197004.272:94): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=20356 comm="syz-executor.2" exe="/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37491f3b19 code=0x0
11:36:52 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffefffe}]})
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='^-\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
r1 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
sendfile(r0, r1, &(0x7f0000000000)=0x200, 0x3)
getegid()

11:36:52 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:36:52 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4)
accept(r0, 0x0, &(0x7f0000000100))
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0x9, 0x9, 0x20, 0x3}, {0x7, 0xdc, 0x7, 0x80}, {0xfff8, 0xf1, 0x1f, 0x4e}, {0x54, 0xbc, 0x5, 0x9}, {0x7, 0x0, 0x5, 0x6}, {0x0, 0xac, 0x3, 0xc096}, {0x4, 0x1f, 0x0, 0x9}]})

11:36:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(0x0, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:36:52 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x6000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:36:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x33)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:36:52 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

11:36:52 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2000000000000055, &(0x7f0000000000)=[{0x9, 0x4, 0x6c, 0xdef7}, {0x9, 0x8, 0x4f, 0x8}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x1, 0xfb, 0x74}, {0x7, 0x0, 0x3, 0x3}, {0x3, 0x7, 0x6, 0x4}, {0x0, 0x2, 0x8a, 0x9}]})
get_thread_area(0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x0, 0x2, 0x7f, 0x5}, {0x1, 0x80, 0x4, 0xce}, {0x9e, 0x5, 0x3, 0x7fff}, {0x2, 0xf8, 0x81, 0x1}, {0x2, 0x5, 0x66, 0x6}, {0x9, 0x4, 0xb2, 0x401}, {0x7, 0x80, 0x8}]})
clock_gettime(0x0, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x6, 0x1, 0x74, 0x5}, {0x100, 0x3, 0x80, 0x9}, {0xfa62, 0x8, 0x81, 0x2}, {0x3e, 0x40, 0xa6, 0x8001}, {0x20, 0x8, 0x3, 0x9}]})
mq_timedsend(0xffffffffffffffff, &(0x7f0000000100)="a4edfef7c17d6a99092fb8eb11", 0xd, 0x3, &(0x7f0000000180)={r0, r1+10000000})

[ 1527.370952] audit: type=1326 audit(1751197012.030:95): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=20477 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc601026b19 code=0x7ffe0000
[ 1527.393036] loop1: detected capacity change from 0 to 2048
[ 1527.395823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1527.399409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1527.406796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1527.411761] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[ 1527.415330] audit: type=1326 audit(1751197012.075:96): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=20488 comm="syz-executor.5" exe="/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec42a85b19 code=0x0
11:36:52 executing program 7:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000100)={0x5, &(0x7f0000000080)=[{0x14, 0x0, 0x20, 0x80}, {0x3, 0xff, 0x12, 0xffff}, {0x400, 0x93, 0x3, 0x3e}, {0x0, 0x0, 0x8, 0x7fffffff}, {0x4, 0x4, 0x8, 0x6}]})
r1 = getegid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee01, <r2=>r1}}, './file0\x00'})
setfsgid(r2)

11:36:52 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

11:36:52 executing program 2:
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c06657200010000000000002bff811955f40000000000000000000000000013000000a5a01fac42c7ba000000"], &(0x7f0000000080)=0x2e)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
r2 = dup2(r1, r0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x8, 0x40, 0x7f}, {0x2, 0x52, 0x2, 0x4a56}, {0x4, 0x0, 0x40}]})
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000001c0))

11:36:52 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x80fe, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:36:52 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0055e4662ded11d2ee1779f8feb3f4c7c7ea9deba1e821c2edf12f3a4968ddccaebb15a3c58694317ebf110751fb743d3a5dde0261a1ab4b32db898d94c2aa7c30ae9ab03dc9a8646d5a49756beaa532361ce4664ef919708ab27a64d0824e5bc26777735dba19c67916340e3fc15924e404f2d32207888a67e34730ba3503ff1aae1e112ca294da"])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:36:52 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

11:36:52 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x0, 0x7fff0000}]})
getegid()

[ 1527.514647] loop1: detected capacity change from 0 to 2048
[ 1527.523103] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
11:36:52 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

11:36:52 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x93ae, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:37:01 executing program 7:
getegid()
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r1=>0x0}, &(0x7f0000008600)=0xc)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r3=>0x0}, &(0x7f0000008600)=0xc)
r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000040)={0x0, 'macvtap0\x00', {0x2}, 0xe1})
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
syz_genetlink_get_family_id$ethtool(0xffffffffffffffff, r4)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0xa4, 0x80, 0x29dec000, 0x41, @private2, @remote, 0x7, 0x0, 0x3be0f2dd, 0x7}})
setregid(r3, 0x0)
statx(r4, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setregid(r1, r6)
setfsgid(r1)
sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)

11:37:01 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800030000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000091d325d6000000000000000000000000000000000000000000000000ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001008000000000000800010000000af30100040000000000000000000000010000006000000000000000000000000000000000000000000000000000000000000000000000000000000057bbaa66000000000000000000000000000000000000000000000000ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3736383832343338342f66696c65302f66696c653000000000000000000000000000000000000000000000596e6dde000000000000000000000000000000000000000000000000ed8100000a000000d5f4655fd5f4655fd5f4655f00000000000001000001000000000800010000000af301000400000000000000000000000100000070", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:37:01 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0xa, 0x0, 0x0, 0x7fff0000}, {0x1f, 0x1f, 0xff}, {0x81, 0x8, 0xd6, 0x1}]})
get_thread_area(0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x1, 0x0, 0x2, 0x9}, {0x3, 0x7, 0xc, 0x6}, {0x4, 0x3f, 0x2}, {0xfff, 0xb0, 0x36, 0xfff}]})
get_thread_area(&(0x7f0000000180)={0x80, 0x20101000, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1})
modify_ldt$write(0x1, &(0x7f0000000140)={0x6, 0xffffffffffffffff, 0x2000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10)
set_thread_area(&(0x7f0000000040)={0x4f, 0x100000, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1})

11:37:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x2, 0x1}, {0x4, 0x1}, {0xb}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x33)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:37:01 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

11:37:01 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xae93, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:37:01 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:37:01 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
setxattr$incfs_id(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)={'0000000000000000000000000000000', 0x31}, 0x20, 0x2)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
open_tree(r0, &(0x7f0000000000)='./file0\x00', 0x1)

[ 1536.847382] loop1: detected capacity change from 0 to 2048
[ 1536.894275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1536.910247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1536.917874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1536.932418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:37:01 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

11:37:01 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0)

11:37:01 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xc0fe, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:37:01 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800030000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000091d325d6000000000000000000000000000000000000000000000000ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001008000000000000800010000000af30100040000000000000000000000010000006000000000000000000000000000000000000000000000000000000000000000000000000000000057bbaa66000000000000000000000000000000000000000000000000ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3736383832343338342f66696c65302f66696c653000000000000000000000000000000000000000000000596e6dde000000000000000000000000000000000000000000000000ed8100000a000000d5f4655fd5f4655fd5f4655f00000000000001000001000000000800010000000af301000400000000000000000000000100000070", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1537.043204] audit: type=1326 audit(1751197021.702:97): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=20750 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5fcbfbb19 code=0x0
11:37:01 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)
set_thread_area(&(0x7f0000000000)={0x9, 0xffffffffffffffff, 0x2000, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1})

[ 1537.090502] loop1: detected capacity change from 0 to 2048
11:37:01 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x7, 0x6, 0x8, 0x4}, {0x6bc3, 0x1, 0x8, 0x21ff}]})
getegid()

11:37:01 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1537.255208] loop1: detected capacity change from 0 to 2048
11:37:11 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xfc00, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:37:11 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

11:37:11 executing program 7:
r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$describe(0x6, r0, &(0x7f0000000600)=""/231, 0xe7)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000180)={r0, 0xe7, 0x6e}, 0x0, &(0x7f00000001c0)="88da7570f4a96699a66bb03985593049b30d72e1ad00c078fb0c88a00447bb5adf845b7b282d945a25979d3565baafefe61b3ff7e199b99a72751701aa99afbf64f6639a79dc753057a843546e9c4c32095283c2d57f4f87a5dddf95c30c5773c71fc15daa6f94d9232a325f7a55e77250277d40f01f0e70d845df23b4ad4753c1a16fd9ac832d8d3d3efba6a11ce8dccb4b12ac4b39664282eb1f76aca3a8f8230c4c09755a2d8beddb470e71316aa3ac5e22d66c17d09429eeb078a78ee22c06d7308684a32511c63b6933a411355446b7168bf0c06578b8bebbf4c1c6aecfba030dfe4edfaf", &(0x7f00000002c0)=""/110)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x9, &(0x7f0000000100)=[{0x5, 0x8e, 0x3f, 0x24f}, {0x8191, 0x7f, 0x20, 0x7f0a}, {0x4a24, 0x0, 0xff, 0x1}, {0x4, 0x5, 0x87, 0x1}, {0x6, 0x8, 0x99, 0xffffff7d}, {0x9, 0x5d, 0x1, 0x8}, {0x8, 0xa1, 0x54}, {0x609, 0x2, 0x4, 0x65ec1da2}, {0xfff9, 0x8, 0x7, 0x3}]})
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001f00)={0x5, &(0x7f0000001ec0)=[{0x0, 0x81, 0xe, 0x3}, {0x40, 0x1f, 0x5, 0x7}, {0x6, 0x3, 0xdd, 0x1}, {0x8, 0x4, 0x81, 0x10001}, {0x8001, 0xff, 0x5, 0xd0}]})
r1 = getegid()
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r3=>0x0}, &(0x7f0000008600)=0xc)
setregid(r3, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r5=>0x0}, &(0x7f0000008600)=0xc)
clock_gettime(0x0, &(0x7f0000001e40)={<r6=>0x0, <r7=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000020c0)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002080)={&(0x7f0000001f80)={0xc8, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@void, @void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b814750b2629245c7cb436623d84eadd73376aa1bdfc4e49"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_team\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40804}, 0x20000000)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001d40)=[{{&(0x7f0000000340), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000001700)=""/133, 0x85}, {&(0x7f00000017c0)=""/175, 0xaf}], 0x3, &(0x7f0000001880)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r8=>0x0}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001980)=""/83, 0x53}], 0x1, &(0x7f0000001a00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001a40), 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001ac0)=""/224, 0xe0}, {&(0x7f0000001bc0)=""/96, 0x60}, {&(0x7f0000001c40)=""/159, 0x9f}], 0x3}}], 0x4, 0x0, &(0x7f0000001e80)={r6, r7+60000000})
setfsgid(r8)
r9 = socket$inet_icmp(0x2, 0x2, 0x1)
signalfd(r9, &(0x7f0000000080)={[0x1]}, 0x8)
setregid(r5, 0x0)
setresgid(r1, r3, r5)

11:37:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:37:11 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x9, 0x81, 0x9, 0x8001}, {0xa013, 0x2, 0x12, 0x200}, {0x8, 0x20, 0x6, 0x7fffffff}, {0x101, 0x1, 0x80}, {0x1, 0x28, 0xff, 0x7fff}, {0x3, 0x9, 0xff}]})
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r2, 0x4c00, r1)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r3=>r2, {<r4=>r1}}, './file0\x00'})
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x5, 0xd, 0x15, "1646a3aeed2bebf2e4fb42b87b32fafde969e09fed0906ff1e1768cfa77d9b6dcd111521b60881096e85fcd6937478ef3bbb2bea7f5a26e50ec3062ff6168d37", "e6d00ddc309eed62d9131f923b4d00ead16f9facdca131a19a7777f5d2299299d48e5779e2333a0b5a96450d874bf0ecf2e35ae782c68801b3ad8a4535be68e0", "27fd36223b0acdd510367f4bc50e87ca4bc4fb1e4846486f7ba75370237933f3", [0x80, 0x5]})
get_thread_area(0x0)
r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x400001, 0x0)
r6 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
clock_gettime(0x0, &(0x7f0000000300)={<r7=>0x0, <r8=>0x0})
ppoll(&(0x7f00000002c0)=[{r4, 0xb613}, {r0}, {r3, 0x1040}, {r5, 0x1}, {r3, 0x1020}, {r6, 0x80}], 0x6, &(0x7f0000000340)={r7, r8+10000000}, &(0x7f0000000380)={[0x101]}, 0x8)

11:37:11 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:37:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x2, 0x1}, {0x4, 0x1}, {0xb}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x33)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:37:11 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x208)

[ 1546.632375] loop1: detected capacity change from 0 to 2048
[ 1546.646359] audit: type=1326 audit(1751197031.306:98): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=20881 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5fcbfbb19 code=0x0
[ 1546.674728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1546.680413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1546.681702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1546.693435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1546.704391] ext4 filesystem being mounted at /syzkaller-testdir006788690/syzkaller.Y4zqxS/260/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1546.708425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:37:11 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xfe80, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:37:11 executing program 2:
memfd_secret(0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:37:11 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getegid()
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x5, 0x7f, 0x3f, 0x1}, {0xfffc, 0x1, 0x0, 0x1}, {0xffd, 0x1, 0x8, 0x400}, {0x1be7, 0x1, 0x5, 0xdf6}]})
getresgid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)=<r1=>0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r3=>0x0}, &(0x7f0000008600)=0xc)
setregid(r3, 0x0)
setresgid(r0, r1, r3)

11:37:11 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800030000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000091d325d6000000000000000000000000000000000000000000000000ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001008000000000000800010000000af30100040000000000000000000000010000006000000000000000000000000000000000000000000000000000000000000000000000000000000057bbaa66000000000000000000000000000000000000000000000000ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3736383832343338342f66696c65302f66696c653000000000000000000000000000000000000000000000596e6dde000000000000000000000000000000000000000000000000ed8100000a000000d5f4655fd5f4655fd5f4655f00000000000001000001000000000800010000000af301000400000000000000000000000100000070", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[])
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1100)
setfsuid(0x0)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:37:11 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x7000900)

[ 1546.817257] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:37:11 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xfec0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1546.910622] loop1: detected capacity change from 0 to 2048
11:37:11 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xff00, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1546.960695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1546.974749] ext4 filesystem being mounted at /syzkaller-testdir006788690/syzkaller.Y4zqxS/261/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1547.014357] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:37:23 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[])
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1100)
setfsuid(0x0)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:37:23 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:37:23 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
get_thread_area(0x0)
get_thread_area(&(0x7f0000000000)={0x80000001, 0x20000000, 0x2000, 0x1, 0x3, 0x1, 0x0, 0x1})

11:37:23 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000001280)=""/209)

11:37:23 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x11000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:37:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:37:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x2, 0x1}, {0x4, 0x1}, {0xb}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x33)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:37:23 executing program 7:
r0 = getpid()
pidfd_open(r0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x8, r0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000180)={0x1})
r1 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
r2 = getpid()
pidfd_open(r2, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x2, 0x3, 0x6, 0x9, r2})
r3 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
fsetxattr$security_ima(r3, &(0x7f0000000080), &(0x7f0000000100)=ANY=[@ANYBLOB="17"], 0x1, 0x2)
getegid()
fsmount(r1, 0x0, 0x3c)

[ 1558.598373] loop1: detected capacity change from 0 to 2048
[ 1558.610434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1558.611754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1558.619340] audit: type=1326 audit(1751197043.264:99): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21037 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5fcbfbb19 code=0x0
[ 1558.627166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1558.640296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1558.643572] ext4 filesystem being mounted at /syzkaller-testdir006788690/syzkaller.Y4zqxS/262/file0 supports timestamps until 2038-01-19 (0x7fffffff)
11:37:23 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x114ac, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:37:23 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
lseek(r0, 0x4, 0x1)
get_thread_area(0x0)

11:37:23 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[])
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1100)
setfsuid(0x0)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1558.693753] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1558.727352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:37:23 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x2, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:37:23 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff0000}, {0x6, 0x80, 0xff, 0x6}]})
getegid()

11:37:23 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x34000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:37:23 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800030000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000091d325d6000000000000000000000000000000000000000000000000ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001008000000000000800010000000af30100040000000000000000000000010000006000000000000000000000000000000000000000000000000000000000000000000000000000000057bbaa66000000000000000000000000000000000000000000000000ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3736383832343338342f66696c65302f66696c653000000000000000000000000000000000000000000000596e6dde000000000000000000000000000000000000000000000000ed8100000a000000d5f4655fd5f4655fd5f4655f00000000000001000001000000000800010000000af301000400000000000000000000000100000070", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:37:23 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
setxattr$incfs_size(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=0x7ff, 0x8, 0x2)
r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0x9, 0x505182)
inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x420)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000180), 0x4)

[ 1559.023294] loop1: detected capacity change from 0 to 2048
[ 1559.080866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1559.094309] ext4 filesystem being mounted at /syzkaller-testdir006788690/syzkaller.Y4zqxS/264/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1559.185199] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1561.469197] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1561.472211] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1561.475280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1561.478727] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1561.481175] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1563.507663] Bluetooth: hci4: command tx timeout
[ 1565.555578] Bluetooth: hci4: command tx timeout
[ 1567.603625] Bluetooth: hci4: command tx timeout
[ 1569.653541] Bluetooth: hci4: command tx timeout
[ 1577.692340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1577.693710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1577.765027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1577.766137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1578.096038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1578.103955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:37:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:37:52 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x40000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:37:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x2, 0x1}, {0xb}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x32)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:37:52 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, 0x0)

11:37:52 executing program 7:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fchown(r0, 0xee01, 0xee01)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080), 0x4)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @empty, 0x6}, 0x1c)
getegid()

11:37:52 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x3, 0x80000)
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, r2)
ioctl$LOOP_SET_FD(r3, 0x4c00, r1)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100))
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:37:52 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:37:52 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4d, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x80000001}]})
get_thread_area(0x0)

[ 1588.034220] loop1: detected capacity change from 0 to 2048
[ 1588.068924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1588.072043] ext4 filesystem being mounted at /syzkaller-testdir006788690/syzkaller.Y4zqxS/265/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1588.092208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:37:52 executing program 6:
semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=""/8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:37:52 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x4, 0x0, 0x0, 0x7fff0000}, {0x405, 0x3, 0x1b, 0x7}, {0x2, 0x7, 0x0, 0x20}, {0x101, 0x3, 0x20, 0x8001}]})
get_thread_area(0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x80000)
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000100)={0x0, 0x1ff, 0x1, [0x5, 0x9, 0x1, 0x0, 0x2], [0x100000001, 0x3, 0x80000000, 0x4, 0xefa, 0xfffffffffffffc5d, 0x7, 0x7, 0xb60, 0xffffffff, 0x4, 0x8e8, 0x10001, 0x1000, 0x1, 0x4, 0x200, 0x3, 0x4, 0x7, 0x4, 0x8001, 0x6, 0x80000000, 0x40, 0x2, 0x3, 0x8, 0x7fffffff, 0xe02, 0xca, 0x9, 0x82db, 0x2, 0x7, 0x1, 0xffffffff, 0x6, 0x21ef, 0x4, 0xffffffffffffffc1, 0x2f, 0x3, 0x80000000, 0x212a, 0x1ff, 0x121, 0x0, 0xfffffffffffff26b, 0x83, 0x4, 0x400, 0xa5ea, 0x6, 0x9, 0xebf, 0x7, 0x1ff, 0x3, 0x1f, 0x0, 0x8, 0x100000001, 0x8, 0x100, 0x0, 0xbc, 0x200, 0x8, 0xffffffffffffffff, 0x0, 0x1, 0x10000, 0x0, 0x1000, 0x7, 0x4, 0x8001, 0x8, 0x3, 0x400, 0x4335, 0xffff, 0x3, 0x0, 0x401, 0x0, 0x6cd9224f, 0xfffffffffffffffc, 0x2, 0xc2, 0xffd, 0x0, 0xfe, 0x8714, 0x1, 0x4b, 0x5, 0x4, 0x4, 0x5, 0x401, 0x3, 0x10001, 0x6, 0x12, 0x3ff, 0x8001, 0x401, 0xffffffff, 0x400, 0xdc1, 0xf7cf, 0x68, 0x7, 0xfffffffffffffff8, 0x0, 0x5, 0xffffffff, 0x5, 0x9]})
r1 = syz_open_dev$vcsa(&(0x7f0000000540), 0x8000, 0x0)
ioctl$TIOCMIWAIT(r1, 0x545c, 0x0)

[ 1588.114761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:37:52 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800030000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000091d325d6000000000000000000000000000000000000000000000000ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001008000000000000800010000000af30100040000000000000000000000010000006000000000000000000000000000000000000000000000000000000000000000000000000000000057bbaa66000000000000000000000000000000000000000000000000ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3736383832343338342f66696c65302f66696c653000000000000000000000000000000000000000000000596e6dde000000000000000000000000000000000000000000000000ed8100000a000000d5f4655fd5f4655fd5f4655f00000000000001000001000000000800010000000af301000400000000000000000000000100000070", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1588.118394] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1588.136046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1588.151992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:37:52 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x80000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1588.181197] loop1: detected capacity change from 0 to 2048
[ 1588.201639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
11:37:52 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getegid()

11:37:52 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x1, 0xaa, 0x2, 0x4}, {0x3, 0x1, 0x0, 0x5}]})
r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xb2, 0x101000)
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080))
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r2, 0x4c00, r1)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100))

[ 1588.207849] ext4 filesystem being mounted at /syzkaller-testdir006788690/syzkaller.Y4zqxS/266/file0 supports timestamps until 2038-01-19 (0x7fffffff)
11:37:52 executing program 6:
semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=""/8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:37:52 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x100100, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1588.288788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:38:02 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640), 0x1100)
setfsuid(0x0)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

11:38:02 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x4, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:38:02 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x400)
r2 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
r3 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
r6 = open_tree(r1, &(0x7f0000000140)='./file1\x00', 0x100)
r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x40001, 0x0)
ioctl$LOOP_SET_FD(r6, 0x4c00, r7)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r8=>r0}, './file0\x00'})
pidfd_getfd(r1, r8, 0x0)
get_thread_area(0x0)

11:38:02 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getegid()
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x7, 0xfa, 0x5f, 0x97}, {0x0, 0x8, 0x8, 0xfffffbff}, {0x3c, 0x0, 0x8, 0x8001}, {0xfc01, 0x20, 0xf4, 0x5}, {0xbb, 0x16, 0x4, 0x88d}]})

11:38:02 executing program 6:
semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=""/8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:38:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x2, 0x1}, {}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x32)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:38:02 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x400300, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:38:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

[ 1597.469812] loop1: detected capacity change from 0 to 2048
[ 1597.475984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:38:02 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x9, 0x20, 0x4, 0x7fff0000}, {0x8, 0x7f, 0x5, 0x20}, {0xff, 0x7, 0xfc, 0xc0}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

[ 1597.484661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1597.501900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1597.504648] ext4 filesystem being mounted at /syzkaller-testdir006788690/syzkaller.Y4zqxS/267/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1597.508178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1597.519857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:38:02 executing program 6:
semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=""/8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)

11:38:02 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800030000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000091d325d6000000000000000000000000000000000000000000000000ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001008000000000000800010000000af30100040000000000000000000000010000006000000000000000000000000000000000000000000000000000000000000000000000000000000057bbaa66000000000000000000000000000000000000000000000000ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3736383832343338342f66696c65302f66696c653000000000000000000000000000000000000000000000596e6dde000000000000000000000000000000000000000000000000ed8100000a000000d5f4655fd5f4655fd5f4655f00000000000001000001000000000800010000000af301000400000000000000000000000100000070", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640), 0x1100)
setfsuid(0x0)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1597.572969] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:38:02 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16, 0x41, 0x2, 0x7ffefffe}]})
getegid()

11:38:02 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:38:02 executing program 2:
socket$inet_udp(0x2, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000200)

[ 1597.628680] audit: type=1326 audit(1751197082.288:100): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21866 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc601026b19 code=0x0
[ 1597.651960] loop1: detected capacity change from 0 to 2048
11:38:02 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1597.668094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1597.671293] ext4 filesystem being mounted at /syzkaller-testdir006788690/syzkaller.Y4zqxS/268/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1597.690940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:38:02 executing program 6:
semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=""/8)
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)

11:38:02 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640), 0x1100)
setfsuid(0x0)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1597.718857] loop1: detected capacity change from 0 to 2048
[ 1597.742579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1597.747616] ext4 filesystem being mounted at /syzkaller-testdir006788690/syzkaller.Y4zqxS/269/file0 supports timestamps until 2038-01-19 (0x7fffffff)
11:38:02 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$chown(0x4, r0, 0xffffffffffffffff, 0x0)
get_thread_area(0x0)

11:38:02 executing program 6:
semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=""/8)
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)

11:38:02 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x3000000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:38:02 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x1100)
setfsuid(r0)
open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1597.800362] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1597.879393] loop1: detected capacity change from 0 to 2048
[ 1597.899867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1597.902022] ext4 filesystem being mounted at /syzkaller-testdir006788690/syzkaller.Y4zqxS/270/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1597.926761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1598.461928] audit: type=1326 audit(1751197083.122:101): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=21866 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc601026b19 code=0x0
11:38:11 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x9, &(0x7f0000000100)=[{0x5, 0x7f, 0x0, 0xfc000000}, {0x81, 0x1, 0x5, 0x4}, {0x40, 0xff, 0x0, 0x3ff}, {0xdb, 0x20, 0x2, 0xc206}, {0x8, 0x0, 0x20, 0x1c000}, {0xffff, 0x7f, 0x3, 0x4}, {0x40, 0x7f, 0x5, 0x7ff}, {0x1, 0x7, 0x7, 0x5}, {0x2, 0x2f, 0x6, 0x7}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:38:11 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:38:11 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:38:11 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x1100)
setfsuid(r0)
open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x101)

11:38:11 executing program 6:
semctl$GETZCNT(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=""/8)
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)

11:38:11 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x4000000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:38:11 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffeffff}]})
get_thread_area(0x0)

11:38:11 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getegid()
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r2=>0x0}, &(0x7f0000008600)=0xc)
setregid(r2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000008600)=0xc)
setregid(r4, 0x0)
getgroups(0x7, &(0x7f0000000000)=[r0, r2, r0, r0, r0, r4, r0])

[ 1607.206894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1607.208667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:38:11 executing program 7:
getegid()
getegid()
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x800)
setfsuid(r1)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x2000000, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, r1}}, {@afid={'afid', 0x3d, 0x7f}}, {@afid={'afid', 0x3d, 0x9}}, {@aname={'aname', 0x3d, '/dev/loop#\x00'}}, {@access_any}, {@cache_none}], [{@dont_measure}]}})
statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="080000000110000000000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=r2, @ANYBLOB="7d1adbb43dbf0a73"])
r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r4, 0x4c00, r3)
dup(0xffffffffffffffff)
linkat(r3, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x400)

11:38:11 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)

[ 1607.286672] audit: type=1326 audit(1751197091.946:102): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22063 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec42a85b19 code=0x7ffe0000
[ 1607.293133] 9pnet_fd: Insufficient options for proto=fd
[ 1607.295399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1607.295833] loop1: detected capacity change from 0 to 2048
[ 1607.305628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1607.341631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1607.353231] ext4 filesystem being mounted at /syzkaller-testdir006788690/syzkaller.Y4zqxS/271/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1607.392942] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:38:21 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x8000000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:38:21 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x101}]})
get_thread_area(0x0)
modify_ldt$write(0x1, &(0x7f0000000080)={0xfe000000, 0x20000800, 0x2000, 0x1, 0x0, 0x0, 0x1}, 0x10)
set_thread_area(&(0x7f0000000000)={0x9, 0x20001000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1})

11:38:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:38:21 executing program 7:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000000)={0x0, 0x9, 0x80000001})
r1 = getegid()
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000003aac851a000000009d4cb224700c2e2e54909e41593e6235b361f6a590419ac6605e52834daa18e5850738a04d240890d4ef63ff51715000cea5384ce0ed245e2a5b439c4613c1389176f58b2ffb4c64e79b6b59b73cfd211b7d2d029cd25d722db50507bae769670c855a", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='./file0\x00'])

11:38:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31)
syz_80211_inject_frame(0x0, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:38:21 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)

11:38:21 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0xfff, 0x1f, 0x1, 0x5}, {0x6, 0x3, 0xdc, 0x1}, {0x74, 0x4, 0x20, 0x9}, {0x7, 0x2, 0x2, 0x4}, {0x0, 0x3, 0xaa, 0x4}, {0x9, 0x3, 0x7d, 0x6}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x9, 0xf3, 0x5d, 0x10000}, {0x7, 0x1f, 0x0, 0x80000001}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:38:21 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x1100)
setfsuid(r0)
open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x101)

[ 1616.549825] audit: type=1326 audit(1751197101.208:103): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22090 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec42a85b19 code=0x0
[ 1616.561259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1616.567186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1616.569398] loop1: detected capacity change from 0 to 2048
[ 1616.573105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1616.579355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:38:21 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
lsetxattr$security_ima(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000140)=ANY=[@ANYBLOB="04015e3d7c66a7e00400"], 0xa, 0x2)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), 0x1, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
name_to_handle_at(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x6, 0x4, 0x4e, 0x2}, 0x401, 0x7ff}}, &(0x7f0000000200), 0x0)

11:38:21 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xb000000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:38:21 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)

[ 1616.650972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1616.661176] ext4 filesystem being mounted at /syzkaller-testdir006788690/syzkaller.Y4zqxS/272/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1616.723235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:38:21 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, 0x0, 0x101)

11:38:21 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)

11:38:21 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xb0195aa, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:38:21 executing program 2:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, 0xfffffffffffffffd, 0x113001, 0x0)
r1 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'})

[ 1616.820946] loop1: detected capacity change from 0 to 2048
[ 1616.854773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1616.864392] ext4 filesystem being mounted at /syzkaller-testdir006788690/syzkaller.Y4zqxS/273/file0 supports timestamps until 2038-01-19 (0x7fffffff)
11:38:21 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x1, 0xdf9, 0x1ff, 0x201, 0xff})
r3 = pidfd_getfd(r0, r0, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000100)=ANY=[@ANYRES64=<r4=>0x0, @ANYBLOB="c7000000000000000600000000000000000000000000000008000000000000000100000000000000210f0000000000000001000000010000370c000009000000000000000000000009000000000000000800000000000000a9550000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000"])
ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000080)=0x1ff)
ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000480)={r4, 0x9})
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r6, 0x4c00, r5)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x100000008)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getegid()

11:38:21 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31)
syz_80211_inject_frame(0x0, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:38:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:38:21 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xe000000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1617.026791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1617.083080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1617.089410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1617.089710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1617.108031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1617.370979] audit: type=1326 audit(1751197102.030:104): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22090 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec42a85b19 code=0x0
11:38:31 executing program 2:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
dup(r1)

11:38:31 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xae0c, 0x0, 0x0, 0x7ffefffe}]})
get_thread_area(0x0)
fcntl$setown(r0, 0x8, 0x0)
get_thread_area(&(0x7f0000000000)={0x7, 0x20000000, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1})

11:38:31 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31)
syz_80211_inject_frame(0x0, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:38:31 executing program 7:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getegid()
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100))

11:38:31 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, 0x0, 0x101)

11:38:31 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)

11:38:31 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x30000000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:38:31 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

[ 1627.253381] loop1: detected capacity change from 0 to 2048
[ 1627.305601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1627.306398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1627.318738] ext4 filesystem being mounted at /syzkaller-testdir006788690/syzkaller.Y4zqxS/274/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1627.322154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1627.330944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:38:31 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x60000000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:38:32 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)

11:38:32 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0x8, 0x7, 0x2, 0x9}, {0x1, 0x7f, 0x9}, {0x7ff, 0x8, 0x7c, 0x5}, {0x0, 0x8, 0x9, 0x3ff}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="4fb6d558688963506c37cd8cbfa4f426d9eff72c14b131cfeda55f0996ad9e741ae7b067f8930314c4d0bb5f74222a8047", 0x31)

11:38:32 executing program 7:
sched_setattr(0xffffffffffffffff, &(0x7f0000000000)={0x38, 0x6, 0x10, 0x2, 0x1f, 0x9, 0x3, 0x2, 0x6, 0x1}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getegid()
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
signalfd4(r0, &(0x7f0000000080)={[0xa2c]}, 0x8, 0x800)

[ 1627.467799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1627.476391] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1630.082959] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1630.087240] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1630.090793] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1630.097316] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1630.099873] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1632.179827] Bluetooth: hci6: command tx timeout
[ 1634.228209] Bluetooth: hci6: command tx timeout
[ 1636.275529] Bluetooth: hci6: command tx timeout
[ 1638.324560] Bluetooth: hci6: command tx timeout
[ 1646.478208] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1646.479361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1646.546556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1646.547906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1646.872014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1646.878411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:39:01 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)
modify_ldt$write2(0x11, &(0x7f0000000000)={0x5, 0x20001000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x87, 0xc, 0x6, 0xffff}, {0xc, 0x20, 0x4, 0x1ff}, {0x3, 0x1, 0x0, 0x5c}]})

11:39:01 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:39:01 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0)

11:39:01 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x7ffffff7, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:39:01 executing program 2:
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
io_setup(0x572, &(0x7f0000000140)=<r1=>0x0)
io_destroy(0x0)
r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0xfbff, r2, &(0x7f0000000140)="88965d31a5683c89bee6ca44fc904cffbcc1f430f02613a0d784b6600b4f1a95a6b23a64f6ca35e32c545e94207099de2972645e5da54f602ad5", 0x3a, 0x9, 0x0, 0x1}, &(0x7f00000001c0))
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0, @ANYBLOB='\x00\x00\x00\x00'])
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010059eb9de1a616cc24cf1f5800ef0000000000b800042c7e3dd7cb3bea", @ANYRES32=<r4=>r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00', @ANYRES16=r3])
r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r6, 0x4c00, r5)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
r8 = pidfd_getfd(r5, r3, 0x0)
io_submit(0x0, 0x4, &(0x7f0000004240)=[&(0x7f0000003f40)={0x0, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff, &(0x7f0000003e80)="70c6c36da3afec935c2d80f2e1b34a7f123c0ad27f07e3aefbe81c9e92a133a8e2b2c586c08f3b3a998f6f903877a462e27b573970b423daaaabc8db02ec188046b45dfdb72e3e9792aeda597ab6bd48e80a5bf739917c8873752ecf101caa147c41b3362c1e162c69e3c281e11d8e53504457335be9603dfdff3efacc98fb055471e0fff94ee70d3ca92a8d57c2c3d297fcc537a1bcdbb5", 0x98, 0x4, 0x0, 0x1}, &(0x7f0000004100)={0x0, 0x0, 0x0, 0x2, 0x7, 0xffffffffffffffff, &(0x7f0000003fc0)="703dbfe7b9c92eec57cdfae3cdd35297bb4bd78469241dac6d302055bdc8caf0a3a6ec0804dff764dd19eeb2f27a5ea6433cae48a2944fdaeb3e3f1a5e2ffcc378a5d514054d8f8486943c7d61cfb5eb992f853c0052dfd93f1191766a366addf53fe9d3a7061a4aa334d5ec48f526c4e565e6218145fd145d75c78fcd9487bd30da54a58ec97823785ba07a6e459f5c820bdae15fa9a8762c978733a4734eb8aad1c3dfd5b4158cad5d7bf6b1211f1817ecfd08a92b8df6d62f4490a87fc0e9dd", 0xc1, 0x7, 0x0, 0x3}, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x1, 0x1, r7, &(0x7f0000004140)="284c5637f2b723f1eb21433aed73ce5d1689cdfc89a0cb7331e181743839267f", 0x20, 0x70fe4bf2, 0x0, 0x1, r4}, &(0x7f0000004200)={0x0, 0x0, 0x0, 0x5, 0x3, r6, &(0x7f00000041c0)="253b614eec3d35f3f21b942c4e582120888713b635504e8171f1ed4c8ac4d4d6afa7d6be5416a9", 0x27, 0x3fb, 0x0, 0x2, r8}])
io_submit(r1, 0x0, &(0x7f0000000300))
r9 = dup2(r0, 0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0))
inotify_add_watch(r9, 0x0, 0x800)

11:39:01 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)

11:39:01 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="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", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, 0x0, 0x101)

11:39:01 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x5aa, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000100)={0x6, &(0x7f0000000080)=[{0x9, 0x6, 0x2, 0x9}, {0xffd, 0x7, 0x2c, 0x6}, {0x1, 0x3, 0x4, 0xffffffff}, {0x6, 0x7, 0x1f, 0x9f64000}, {0x96d2, 0x9c, 0x5, 0xffffffff}, {0x5, 0x1, 0xfb, 0xffffffff}]})
getegid()
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = fsopen(&(0x7f0000000200)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
fstatfs(r1, &(0x7f0000000140)=""/183)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r2=>0x0}, &(0x7f0000008600)=0xc)
setregid(r2, 0x0)
getgroups(0x1, &(0x7f0000000000)=[r2])

[ 1657.194652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1657.208302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1657.208820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1657.219104] loop1: detected capacity change from 0 to 2048
[ 1657.222951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:39:01 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)

11:39:01 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xaa95010b, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1657.278341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1657.283768] ext4 filesystem being mounted at /syzkaller-testdir006788690/syzkaller.Y4zqxS/275/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1657.332203] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:39:02 executing program 1:
r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x9, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000008000000018000000c20500002b82", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000016d7fb4ca540446e9e3afc5ae1325600010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4080}, {&(0x7f0000012800)="ed41000000100000d5f4655fd5f4655fd5f4655f00000000000002008000000000000800030000000af30100040000000000000000000000010000005000000000000000000000000000000000000000000000000000000000000000000000000000000091d325d6000000000000000000000000000000000000000000000000ed8100001a040000d5f4655fd5f4655fd5f4655f00000000000001008000000000000800010000000af30100040000000000000000000000010000006000000000000000000000000000000000000000000000000000000000000000000000000000000057bbaa66000000000000000000000000000000000000000000000000ffa1000026000000d5f4655fd5f4655fd5f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3736383832343338342f66696c65302f66696c653000000000000000000000000000000000000000000000596e6dde000000000000000000000000000000000000000000000000ed8100000a000000d5f4655fd5f4655fd5f4655f00000000000001000001000000000800010000000af301000400000000000000000000000100000070", 0x1bd, 0x4580}, {&(0x7f0000012b00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531", 0x49, 0x10000}, {&(0x7f0000013000)="504d4d00504d4dff", 0x8, 0x40000}, {0x0, 0x0, 0x80000}], 0x0, &(0x7f0000000140)=ANY=[])
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x1100)
setfsuid(r1)
open_tree(r0, &(0x7f0000000040)='./file1\x00', 0x0)

11:39:02 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)

11:39:02 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x1, 0x3f, 0x6, 0x11eb}, {0x7923, 0x8, 0x0, 0xffffffff}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x3, 0x3, 0x80}]})
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x577277e11b42a5c5, 0x0)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x81, 0x6, 0x0, 0x2abceca8}]}, 0x10)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))

11:39:02 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{0x6, 0x0, 0x8, 0x7fff0000}, {0x5f4f, 0x4, 0x8, 0x7ff}, {0x7f, 0xf7, 0x3f, 0x6}, {0x6, 0x9, 0x2, 0x5}, {0x8000, 0xe3, 0x2, 0x5}, {0x51ec, 0x9, 0x6, 0x77bb}, {0x8, 0x3, 0x0, 0x8001}]})
get_thread_area(0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x7, 0x1, 0x0, 0xd2de}]})
get_thread_area(&(0x7f0000000040)={0xcac, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x1})

[ 1657.435340] loop1: detected capacity change from 0 to 2048
[ 1657.470672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1657.479191] ext4 filesystem being mounted at /syzkaller-testdir006788690/syzkaller.Y4zqxS/276/file0 supports timestamps until 2038-01-19 (0x7fffffff)
11:39:02 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)

11:39:02 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xac140100, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:39:02 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0))
r0 = getegid()
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r2=>0x0}, &(0x7f0000008600)=0xc)
setregid(r2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000040)=0xc)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000100), 0x4)
r4 = openat2(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x2800, 0x161, 0x14}, 0x18)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000240)={0x8, 'virt_wifi0\x00', {'vxcan1\x00'}, 0x7})
setgroups(0x6, &(0x7f0000000080)=[r0, r0, r0, r2, r3, r0])

[ 1657.587694] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
11:39:02 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:39:02 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x181)
pipe2(&(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x800)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000001c0))
r2 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r2, 0x4c00, r0)
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x91000100)
ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r2, {0x40}}, './file0\x00'})
inotify_add_watch(r3, &(0x7f0000000100)='./file1\x00', 0x15000840)

11:39:02 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0)

11:39:02 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000040)})
getegid()
getegid()
getegid()

11:39:02 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xae930000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1657.742386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1657.755676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1657.757841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1657.763283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:39:10 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]})
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)

11:39:10 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:39:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0)

11:39:10 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
lsetxattr$security_ima(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000140)=ANY=[@ANYBLOB="04015e3d7c66a7e00400"], 0xa, 0x2)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), 0x1, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
name_to_handle_at(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x6, 0x4, 0x4e, 0x2}, 0x401, 0x7ff}}, &(0x7f0000000200), 0x0)

11:39:10 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)
fadvise64(r0, 0x8, 0x8, 0x0)

11:39:10 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x1, 0xc3, 0x4a, 0x7}, {0x1, 0x4d, 0x7f, 0x7}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:39:10 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xeffdffff, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:39:10 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7fff, 0x3, 0x0, 0x7fff0000}]})
r0 = getegid()
r1 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000008600)=0xc)
setregid(r4, 0x0)
getgroups(0x7, &(0x7f00000001c0)=[r0, r2, r0, r0, r4, r0, r0])
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
fremovexattr(r1, &(0x7f0000000040)=@random={'trusted.', ')\x00'})

[ 1665.837137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1665.845259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:39:10 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
lsetxattr$security_ima(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000140)=ANY=[@ANYBLOB="04015e3d7c66a7e00400"], 0xa, 0x2)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), 0x1, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
name_to_handle_at(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x6, 0x4, 0x4e, 0x2}, 0x401, 0x7ff}}, &(0x7f0000000200), 0x0)

[ 1665.871244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1665.881808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:39:10 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xf7ffff7f, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:39:10 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x29, &(0x7f0000000040)})
get_thread_area(0x0)

11:39:10 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]})
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)

11:39:10 executing program 2:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = dup3(r0, r0, 0x80000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100))
r2 = inotify_init1(0x80000)
inotify_add_watch(r2, 0x0, 0x2000202)

11:39:10 executing program 7:
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x40)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x6, &(0x7f0000000000)=[{0x20, 0x2, 0x7f, 0x401}, {0x3, 0x6, 0x1, 0x8001}, {0xfd8f, 0x8, 0x1, 0x1}, {0xd3f, 0x4, 0x5, 0x7}, {0x401, 0x3, 0x1, 0x80}, {0xffff, 0x0, 0x9, 0x8000}]})
r1 = syz_io_uring_complete(0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
write$P9_RLCREATE(r2, &(0x7f0000000140)={0x18, 0xf, 0x2, {{0x0, 0x4, 0x1}, 0x218c}}, 0x18)
r3 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
sync_file_range(r3, 0x6, 0x0, 0x0)
ioctl$FIOCLEX(r1, 0x5451)
getegid()

11:39:10 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100))
get_thread_area(0x0)

11:39:10 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]})
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)

11:39:19 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xfc000000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:39:19 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:39:19 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:39:19 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:39:19 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
lsetxattr$security_ima(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000140)=ANY=[@ANYBLOB="04015e3d7c66a7e00400"], 0xa, 0x2)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), 0x1, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
name_to_handle_at(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x6, 0x4, 0x4e, 0x2}, 0x401, 0x7ff}}, &(0x7f0000000200), 0x0)

11:39:19 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]})
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)

11:39:19 executing program 7:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='hugetlbfs\x00', &(0x7f0000000140)='\x80)-$].\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
signalfd(r1, &(0x7f0000000000)={[0x3f]}, 0x8)
getegid()

11:39:19 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)
modify_ldt$write2(0x11, &(0x7f0000000000)={0x400, 0x20000800, 0x400, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10)

[ 1674.666651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1674.674184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1674.691573] audit: type=1326 audit(1751197159.351:105): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=23266 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5fcbfbb19 code=0x0
11:39:19 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xfe800000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:39:19 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xffff0000}]})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)=ANY=[@ANYBLOB="0100fcff01003a0000000000", @ANYRES32=<r1=>r0, @ANYBLOB="000000696c65300000074661d4a39e5e0000000000000006a8d6081abe04b0b31f1301b7787692247cf473abd1abac57707fdc5d0042a0d0b7b81b2853c2ce722405e260901d1b4579d960479576683c9e01bca79c6b9c9f4715540e4099966d85d5521fc7ab0f1593ae7634"])
shutdown(r1, 0x1)
get_thread_area(0x0)

[ 1674.713656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1674.725765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:39:19 executing program 7:
utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x3, 0xfffffffffffff1b1})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getegid()

11:39:19 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
lsetxattr$security_ima(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000140)=ANY=[@ANYBLOB="04015e3d7c66a7e00400"], 0xa, 0x2)
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), 0x1, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)

[ 1674.758028] audit: type=1326 audit(1751197159.417:106): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=23280 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec42a85b19 code=0xffff0000
11:39:28 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xfec00000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:39:28 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffefffd}]})
get_thread_area(0x0)

11:39:28 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]})
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)

11:39:28 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:39:28 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
lsetxattr$security_ima(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000140)=ANY=[@ANYBLOB="04015e3d7c66a7e00400"], 0xa, 0x2)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), 0x1, 0x0)
syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)

11:39:28 executing program 7:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getegid()
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100))

11:39:28 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:39:28 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0))
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

[ 1684.262851] audit: type=1326 audit(1751197168.922:107): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=23295 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec42a85b19 code=0x7ffe0000
[ 1684.269365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1684.273208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:39:28 executing program 5:
fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/20)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)

[ 1684.301372] audit: type=1326 audit(1751197168.959:108): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=23299 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5fcbfbb19 code=0x0
11:39:29 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0xfffb, 0x9, 0x3, 0x83}, {0x3, 0x3f, 0x0, 0x6d01}, {0x5, 0xf, 0x2, 0x7}, {0x5, 0x1, 0x1f, 0xffff}, {0x1f, 0x20, 0x8, 0x7f}, {0x4, 0x1f, 0x7, 0x5}, {0x6, 0x7, 0x0, 0x80000001}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

[ 1684.340420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1684.355027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:39:29 executing program 7:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getegid()
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r2, 0x4c00, r1)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xee01, r3}}, './file0\x00'})

11:39:29 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
lsetxattr$security_ima(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000140)=ANY=[@ANYBLOB="04015e3d7c66a7e00400"], 0xa, 0x2)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0), 0x1, 0x0)

11:39:29 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xff000000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:39:29 executing program 5:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}}, 0x20008000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)

11:39:29 executing program 2:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000a0e)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4d0)

11:39:29 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000100)={0x6, &(0x7f0000000080)=[{0x1c80, 0x4, 0x81, 0x6}, {0x6, 0x8, 0x3, 0xafc}, {0x100, 0x81, 0x1f, 0x2}, {0x6, 0x20, 0x9, 0x7fff}, {0xf5, 0x1, 0x0, 0x2}, {0x9, 0x8, 0x1, 0x9d1a}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200)

11:39:29 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0xfffffdef, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:39:29 executing program 7:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0xa0)

[ 1686.900957] Bluetooth: hci4: command 0x0406 tx timeout
11:39:38 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]})
semctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x3, &(0x7f0000000100)=""/225)

11:39:38 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0x6ab, 0xff, 0x5, 0xb4b}, {0xae5, 0x7, 0x3f, 0xa90}, {0xffff, 0x3, 0x7, 0x55f}, {0x401, 0xaf, 0x1f, 0x3}, {0xef0, 0x4, 0x8, 0x40}, {0x400, 0x0, 0x80, 0xffff8000}, {0xa9af, 0x2, 0xaf, 0x6}]})
set_thread_area(&(0x7f0000000100)={0x5, 0x0, 0x2000, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1})

11:39:38 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:39:38 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:39:38 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
lsetxattr$security_ima(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000140)=ANY=[@ANYBLOB="04015e3d7c66a7e00400"], 0xa, 0x2)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)

11:39:38 executing program 2:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x40, 0x0, 0x32, 0xfff}]})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x12000480)

11:39:38 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x4, 0x24, 0x7, 0x5}, {0xc94d, 0xff, 0x80, 0xdb1}, {0x400, 0x20, 0x2, 0xe6}, {0x6, 0x1f, 0x5, 0xffff}, {0x8, 0x8, 0x7f, 0x6}]})
getegid()

11:39:38 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x4000000000000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1694.086832] audit: type=1326 audit(1751197178.747:109): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=23544 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5fcbfbb19 code=0x0
[ 1694.097090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1694.102550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1694.116030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:39:38 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x1f, 0x4, 0x3, 0xffff}, {0xffff, 0x3f, 0x2, 0x8}, {0x8, 0x7f, 0xff, 0x93c0}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x59b, 0x3, 0xde, 0x4}, {0x9, 0x3, 0x8, 0x1}]})
getegid()
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x254, 0x7c, 0x4, 0x8}, {0x7ff, 0x4, 0x80, 0x74e}, {0x80, 0x3, 0x6, 0x2}, {0x1, 0x40, 0x74, 0x1}]})
prctl$PR_SET_SECCOMP(0x16, 0xe921d3bdcdd53541, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x3, 0x80, 0x1, 0x7f}, {0x7f, 0xff, 0x8, 0x5}, {0x6, 0x0, 0x1, 0x1}, {0x6, 0xfb, 0xd, 0x40}, {0x9, 0x3f, 0x6, 0x3}]})

[ 1694.125751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:39:38 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\xf6\xf6\x18\xd9#F\xd3\x1ai\x8b\xe6ri\xeb=.)\xe6\xd9\x89\x94J\x99\x1eS\xb6\xa3\x11\xa1\x89^\x0f\xe8\xc9\x9c\x94&s\x11\"\x16\xf0/j]\xa1^X\xc8\x99\x1eq\x06\x04\xe4:\xe5U\xb1\xbe\x152\x90nJ@\xff\x9a=uqRz\xd1|)b\x0e\x01\'\x98\xc3j\x1b\x02*y\xc6\xa2\x17\xed\x82\xc0~\x8b\xbdo{\xe2\xe0\xc8\xaf\x00<A\xe1\xe7\xa1\x10 \xf57-d', &(0x7f0000000000)="f5956281162a12e2ae9a969cfaf5daffa182941805e4e7d7872fe7e271f8ef8dffe9334c7dd8c61a011f2044ff462281bd6e3def218fcbfc", 0x38)
flock(r0, 0x5)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x8, &(0x7f0000000080)=[{0x2, 0x81, 0x9, 0x1}, {0x9, 0x73, 0x20, 0x7ff}, {0x4, 0x34, 0x3, 0xffffffc0}, {0xffff, 0x9, 0x1, 0x1e17}, {0x2, 0x6, 0xd6, 0x9}, {0x800, 0x9, 0xe1, 0x96}, {0x8001, 0x13, 0x20, 0x1}, {0x1, 0x1, 0x20, 0x3c}]})
getegid()

11:39:38 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
lsetxattr$security_ima(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100), &(0x7f0000000140)=ANY=[@ANYBLOB="04015e3d7c66a7e00400"], 0xa, 0x2)

11:39:38 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200)=ANY=[@ANYBLOB="00fbdcffffdd2d4cd1fc23c7ff0358799f00a7cb5c7c183c8ae5866447536a54a4332e803d07053ca7a324b8346083b23557a254d233f31693b057c4a19c91a98bcb55ef008fd2e3193cc9e3da20219fe71424d45584bc3fab44358da8d439fea17ecfb1ea38bbc73d0504913006f1d1dea960acd7485f1ed0446a0ba9119292fea115cc19e71a383ae020481d71561a7ba0391f950f273e792b4860fc457ce7e0c2fa6ec9e6051ecc74f92b9136f7bd71fbbdcaaffc96313dade5725432b74ceeffbf48afc7af6dd8bbc08940f32c4e0d30aeb51e265ede96d6f2b74d730c58ca1559f6ef46d3783e88958fa788b4"], 0xdc, 0x2)

11:39:38 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x8000000000000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:39:38 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100))
getegid()

11:39:38 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')

11:39:47 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
semctl$IPC_INFO(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000100)=""/225)

11:39:47 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x8, &(0x7f0000000000)=[{0x42d, 0x6d, 0x40, 0x8}, {0x779, 0x4, 0x80, 0x7}, {0x100, 0x0, 0xff, 0x77f}, {0x2, 0xa7, 0x79, 0x3}, {0x915e, 0x8d, 0x7, 0xe8}, {0x4, 0x7b, 0x1, 0x7}, {0x200, 0xac, 0x8, 0xd3b}, {0x40, 0x7, 0x67, 0x8}]})

11:39:47 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:39:47 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x10010000000000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:39:47 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x3f1a, 0x0, 0x2, 0x5}]})
get_thread_area(0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={<r1=>0x0})
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x8001, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000001c0)={r1, 0x2, r2, 0x1f, 0x80000})
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x0, 0x1, 0x9, 0x80000001}, {0x40, 0x0, 0x7, 0x7fffffff}, {0x3, 0x5, 0x9, 0x1}, {0x20, 0x7e, 0x0, 0x9}]})

11:39:47 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
unlink(&(0x7f0000000000)='./file0\x00')

11:39:47 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = getegid()
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006b00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000001100), 0x6e, &(0x7f0000002380)=[{&(0x7f0000000080)=""/36, 0x24}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/218, 0xda}, {&(0x7f0000002280)=""/5, 0x5}, {&(0x7f00000022c0)=""/129, 0x81}], 0x5, &(0x7f0000006e80)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000002480), 0x6e, &(0x7f0000003800)=[{&(0x7f0000006f00)=""/240, 0xf0}, {&(0x7f0000002600)=""/14, 0xe}, {&(0x7f0000002640)=""/138, 0x8a}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/230, 0xe6}], 0x5, &(0x7f0000003880)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000003900)=""/246, 0xf6}, {&(0x7f0000003a00)=""/235, 0xeb}, {&(0x7f0000003b00)=""/77, 0x4d}, {&(0x7f0000003b80)=""/231, 0xe7}], 0x4, &(0x7f0000003cc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r2=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r3=>0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000003d40)=""/220, 0xdc}], 0x1, &(0x7f0000006d80)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000009a7be820b4c7ab9cf88d98a9d6f1b893fa701dd4b3dc21822012dd99ca9199c26d4ed515200000007fe4be0000fa9308868b2fd5f0c5851264561f950b9baf971848430404e0660a4b729de4dd35661872059ebf389bba1f7c570d0a4cd8109fb9e1121cbf88a4d7ee5055b8f81a65a364a90c13e459cf969ab14fe222291e8473b6bb00ae2a70fc49437ac81066fbafc3b34f8dbbea0bcd4c713d8664fff1a59c4ef8be17eebdae2ab88fe9a798b307d39687e5c810cf8c3f7b81bf769273b4e72ef5f927fd2c67b1fc51adb7e384f28d4ceff32b918968db5ce7"], 0x20}}, {{&(0x7f0000003ec0), 0x6e, &(0x7f0000004080)=[{&(0x7f0000003f40)=""/206, 0xce}, {&(0x7f0000004040)=""/28, 0x1c}], 0x2, &(0x7f00000040c0)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0bdfc7fd000200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc8}}, {{&(0x7f00000041c0)=@abs, 0x6e, &(0x7f00000047c0)=[{&(0x7f0000004240)=""/61, 0x3d}, {&(0x7f0000004280)=""/235, 0xeb}, {&(0x7f0000004380)=""/116, 0x74}, {&(0x7f0000004400)=""/118, 0x76}, {&(0x7f0000004480)=""/50, 0x32}, {&(0x7f00000044c0)=""/163, 0xa3}, {&(0x7f0000004580)=""/213, 0xd5}, {&(0x7f0000004680)=""/36, 0x24}, {&(0x7f00000046c0)=""/223, 0xdf}], 0x9, &(0x7f0000004880)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000004f80)=[{&(0x7f0000004980)=""/75, 0x4b}, {&(0x7f0000004a00)=""/184, 0xb8}, {&(0x7f0000004ac0)=""/100, 0x64}, {&(0x7f0000004b40)=""/81, 0x51}, {&(0x7f0000004bc0)=""/251, 0xfb}, {&(0x7f0000004cc0)=""/40, 0x28}, {&(0x7f0000004d00)=""/120, 0x78}, {&(0x7f0000004d80)=""/82, 0x52}, {&(0x7f0000004e00)=""/213, 0xd5}, {&(0x7f0000004f00)=""/96, 0x60}], 0xa, &(0x7f0000005040)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r4=>0x0}}}], 0x60}}, {{&(0x7f00000050c0), 0x6e, &(0x7f0000006640)=[{&(0x7f0000005140)=""/128, 0x80}, {&(0x7f00000051c0)=""/101, 0x65}, {&(0x7f0000005240)=""/192, 0xc0}, {&(0x7f0000002540)=""/96, 0x60}, {&(0x7f0000005380)=""/60, 0x3c}, {&(0x7f00000053c0)=""/35, 0x23}, {&(0x7f0000005400)=""/8, 0x8}, {&(0x7f0000005440)=""/231, 0xe7}, {&(0x7f0000005540)=""/4096, 0x1000}, {&(0x7f0000006540)=""/220, 0xdc}], 0xa, &(0x7f0000006700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000006a80)=[{&(0x7f0000006780)=""/19, 0x13}, {&(0x7f00000067c0)=""/189, 0xbd}, {&(0x7f0000006880)=""/225, 0xe1}, {&(0x7f0000006980)=""/204, 0xcc}], 0x4, &(0x7f0000006ac0)=[@cred={{0x1c}}], 0x20}}], 0xa, 0x40000002, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
inotify_init1(0x80800)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002400), &(0x7f0000002440)=0xc)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r7=>0x0}, &(0x7f0000008600)=0xc)
setregid(r7, 0x0)
setresgid(r7, r4, r2)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, <r8=>0x0}, &(0x7f0000008600)=0xc)
r9 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r9, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
ioctl$int_in(r9, 0x5452, &(0x7f0000002500)=0x7)
setregid(r8, 0x0)
setresgid(r3, r8, r0)

11:39:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3d)

[ 1702.734333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:39:47 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x40030000000000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

[ 1702.745531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:39:47 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
semctl$IPC_INFO(0xffffffffffffffff, 0x0, 0x3, 0x0)

[ 1702.778522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1702.782190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:39:47 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
inotify_add_watch(0xffffffffffffffff, 0x0, 0x454)

11:39:47 executing program 1:
unlink(&(0x7f0000000000)='./file0\x00')

11:39:47 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x100000000000000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:39:47 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\xf6\xf6\x18\xd9#F\xd3\x1ai\x8b\xe6ri\xeb=.)\xe6\xd9\x89\x94J\x99\x1eS\xb6\xa3\x11\xa1\x89^\x0f\xe8\xc9\x9c\x94&s\x11\"\x16\xf0/j]\xa1^X\xc8\x99\x1eq\x06\x04\xe4:\xe5U\xb1\xbe\x152\x90nJ@\xff\x9a=uqRz\xd1|)b\x0e\x01\'\x98\xc3j\x1b\x02*y\xc6\xa2\x17\xed\x82\xc0~\x8b\xbdo{\xe2\xe0\xc8\xaf\x00<A\xe1\xe7\xa1\x10 \xf57-d', &(0x7f0000000000)="f5956281162a12e2ae9a969cfaf5daffa182941805e4e7d7872fe7e271f8ef8dffe9334c7dd8c61a011f2044ff462281bd6e3def218fcbfc", 0x38)
flock(r0, 0x5)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x8, &(0x7f0000000080)=[{0x2, 0x81, 0x9, 0x1}, {0x9, 0x73, 0x20, 0x7ff}, {0x4, 0x34, 0x3, 0xffffffc0}, {0xffff, 0x9, 0x1, 0x1e17}, {0x2, 0x6, 0xd6, 0x9}, {0x800, 0x9, 0xe1, 0x96}, {0x8001, 0x13, 0x20, 0x1}, {0x1, 0x1, 0x20, 0x3c}]})
getegid()

11:39:47 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="01010040", @ANYRES16=r2, @ANYBLOB="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"/521], 0x178}, 0x1, 0x0, 0x0, 0x8000}, 0x4004)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x35, 0x56, 0x90, 0x5}, {0x0, 0x4}, {0x401, 0xfa, 0x3, 0xb255cc80}]})
r3 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
r4 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000080)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r6, 0x4c00, r5)
sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4140040}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="24010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x4080}, 0x4000)
signalfd4(r3, &(0x7f0000000000)={[0x8000]}, 0x8, 0x80000)
getegid()
r7 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r8 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r8, 0x4c00, r7)
fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000700)='IPVS\x00', &(0x7f0000000740)='./file0\x00', r7)

11:39:47 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\xf6\xf6\x18\xd9#F\xd3\x1ai\x8b\xe6ri\xeb=.)\xe6\xd9\x89\x94J\x99\x1eS\xb6\xa3\x11\xa1\x89^\x0f\xe8\xc9\x9c\x94&s\x11\"\x16\xf0/j]\xa1^X\xc8\x99\x1eq\x06\x04\xe4:\xe5U\xb1\xbe\x152\x90nJ@\xff\x9a=uqRz\xd1|)b\x0e\x01\'\x98\xc3j\x1b\x02*y\xc6\xa2\x17\xed\x82\xc0~\x8b\xbdo{\xe2\xe0\xc8\xaf\x00<A\xe1\xe7\xa1\x10 \xf57-d', &(0x7f0000000000)="f5956281162a12e2ae9a969cfaf5daffa182941805e4e7d7872fe7e271f8ef8dffe9334c7dd8c61a011f2044ff462281bd6e3def218fcbfc", 0x38)
flock(r0, 0x5)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x8, &(0x7f0000000080)=[{0x2, 0x81, 0x9, 0x1}, {0x9, 0x73, 0x20, 0x7ff}, {0x4, 0x34, 0x3, 0xffffffc0}, {0xffff, 0x9, 0x1, 0x1e17}, {0x2, 0x6, 0xd6, 0x9}, {0x800, 0x9, 0xe1, 0x96}, {0x8001, 0x13, 0x20, 0x1}, {0x1, 0x1, 0x20, 0x3c}]})
getegid()

11:39:56 executing program 5:
pread64(0xffffffffffffffff, &(0x7f0000000100)=""/191, 0xbf, 0x9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)

11:39:56 executing program 1:
unlink(&(0x7f0000000000)='./file0\x00')

11:39:56 executing program 2:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x10002)
r2 = signalfd(r1, &(0x7f0000000080)={[0x6e1]}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000000000000", @ANYRES32=<r3=>r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe4, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x1d}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x81}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7f}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x80}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)

11:39:56 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x200000000000000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:39:56 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\xf6\xf6\x18\xd9#F\xd3\x1ai\x8b\xe6ri\xeb=.)\xe6\xd9\x89\x94J\x99\x1eS\xb6\xa3\x11\xa1\x89^\x0f\xe8\xc9\x9c\x94&s\x11\"\x16\xf0/j]\xa1^X\xc8\x99\x1eq\x06\x04\xe4:\xe5U\xb1\xbe\x152\x90nJ@\xff\x9a=uqRz\xd1|)b\x0e\x01\'\x98\xc3j\x1b\x02*y\xc6\xa2\x17\xed\x82\xc0~\x8b\xbdo{\xe2\xe0\xc8\xaf\x00<A\xe1\xe7\xa1\x10 \xf57-d', &(0x7f0000000000)="f5956281162a12e2ae9a969cfaf5daffa182941805e4e7d7872fe7e271f8ef8dffe9334c7dd8c61a011f2044ff462281bd6e3def218fcbfc", 0x38)
flock(r0, 0x5)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x8, &(0x7f0000000080)=[{0x2, 0x81, 0x9, 0x1}, {0x9, 0x73, 0x20, 0x7ff}, {0x4, 0x34, 0x3, 0xffffffc0}, {0xffff, 0x9, 0x1, 0x1e17}, {0x2, 0x6, 0xd6, 0x9}, {0x800, 0x9, 0xe1, 0x96}, {0x8001, 0x13, 0x20, 0x1}, {0x1, 0x1, 0x20, 0x3c}]})
getegid()

11:39:56 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:39:56 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3d)

11:39:56 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x4e74, 0x1, 0x2, 0x7fff0000}]})
getegid()
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0))
r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000440), 0x0, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, r2)
r4 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
ioctl$LOOP_SET_FD(r3, 0x4c00, r4)

[ 1711.911814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1711.919588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:39:56 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\xf6\xf6\x18\xd9#F\xd3\x1ai\x8b\xe6ri\xeb=.)\xe6\xd9\x89\x94J\x99\x1eS\xb6\xa3\x11\xa1\x89^\x0f\xe8\xc9\x9c\x94&s\x11\"\x16\xf0/j]\xa1^X\xc8\x99\x1eq\x06\x04\xe4:\xe5U\xb1\xbe\x152\x90nJ@\xff\x9a=uqRz\xd1|)b\x0e\x01\'\x98\xc3j\x1b\x02*y\xc6\xa2\x17\xed\x82\xc0~\x8b\xbdo{\xe2\xe0\xc8\xaf\x00<A\xe1\xe7\xa1\x10 \xf57-d', &(0x7f0000000000)="f5956281162a12e2ae9a969cfaf5daffa182941805e4e7d7872fe7e271f8ef8dffe9334c7dd8c61a011f2044ff462281bd6e3def218fcbfc", 0x38)
flock(r0, 0x5)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000180)={0x8, &(0x7f0000000080)=[{0x2, 0x81, 0x9, 0x1}, {0x9, 0x73, 0x20, 0x7ff}, {0x4, 0x34, 0x3, 0xffffffc0}, {0xffff, 0x9, 0x1, 0x1e17}, {0x2, 0x6, 0xd6, 0x9}, {0x800, 0x9, 0xe1, 0x96}, {0x8001, 0x13, 0x20, 0x1}, {0x1, 0x1, 0x20, 0x3c}]})

11:39:56 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)

[ 1711.977623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1711.988478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:39:56 executing program 2:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x7f, 0x5, 0xe1, 0x7ff}]})
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x9, &(0x7f0000000100)=[{0x2, 0x2, 0x6, 0xffffffce}, {0xffff, 0x0, 0x7, 0x200}, {0x8, 0x1, 0xf8, 0x5}, {0x7, 0x0, 0x1c, 0xeb3}, {0xa65, 0x7, 0x79, 0x7fd}, {0x9, 0x8}, {0x1, 0x40, 0xd4, 0x2}, {0x9dd9, 0x3f, 0x40, 0x84f}, {0x6, 0x3, 0x5, 0x6}]})
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x6, &(0x7f0000000240)=[{0xf800, 0x3f, 0x0, 0x7}, {0x1, 0x1, 0x9, 0x647b1aad}, {0x6, 0x6, 0xff, 0x7ff}, {0x7f6, 0x0, 0x41, 0x4}, {0x1ff, 0x0, 0x8, 0x5}, {0x2, 0x0, 0x7, 0x560}]})
lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000380), 0x8, 0x141401)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x2, 0x8, 0x4, 0x7f}, {0x8, 0x0, 0x81, 0x7ff}]})
pwrite64(r0, &(0x7f00000002c0)="b3f6ed016ba856289929b52a06b2fa1d28dbff0a31a775a0baef413baef37e86c7c94b792d82599e81c7658fce838d435e339d4a52bbb39bc03c750498d016eb039e26ce4c11672603afc0b36d13d15f2a19f54a97cb46a7909fb7a809527246b8de67c090684953169d32c190bde43d8a44fc476cbb2ef0a70bb345ec18546e9c54516641f2b29e2bf7177d8548c9e87d50361059862141fea464081e6cf33ceda428bfb7f55267df7ad230d3c11fa66b9df70b89348d8ac3", 0xb9, 0xe000000000000000)
inotify_add_watch(r1, &(0x7f0000000200)='./file0\x00', 0x0)

11:39:56 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
get_thread_area(0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x401, 0x7d, 0x3, 0x7fff}]})
r1 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
fremovexattr(r1, &(0x7f0000000000)=@known='security.selinux\x00')
io_setup(0x9, &(0x7f00000001c0)=<r2=>0x0)
openat2(0xffffffffffffff9c, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240)={0x2000, 0x0, 0x10}, 0x18)
r3 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000013c0)=""/173, 0xad}], 0x1, &(0x7f00000014c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x2)
io_submit(r2, 0x0, &(0x7f0000001580))
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='lazytime\x00', 0x0, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
fcntl$setpipe(r4, 0x407, 0x3ff)

11:39:56 executing program 1:
unlink(&(0x7f0000000000)='./file0\x00')

11:39:56 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x300000000000000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:39:56 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
getegid()

11:39:56 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\xf6\xf6\x18\xd9#F\xd3\x1ai\x8b\xe6ri\xeb=.)\xe6\xd9\x89\x94J\x99\x1eS\xb6\xa3\x11\xa1\x89^\x0f\xe8\xc9\x9c\x94&s\x11\"\x16\xf0/j]\xa1^X\xc8\x99\x1eq\x06\x04\xe4:\xe5U\xb1\xbe\x152\x90nJ@\xff\x9a=uqRz\xd1|)b\x0e\x01\'\x98\xc3j\x1b\x02*y\xc6\xa2\x17\xed\x82\xc0~\x8b\xbdo{\xe2\xe0\xc8\xaf\x00<A\xe1\xe7\xa1\x10 \xf57-d', &(0x7f0000000000)="f5956281162a12e2ae9a969cfaf5daffa182941805e4e7d7872fe7e271f8ef8dffe9334c7dd8c61a011f2044ff462281bd6e3def218fcbfc", 0x38)
flock(r0, 0x5)

11:40:05 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')

11:40:05 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162eeedbc556768696a6b00000010002d800a000000020202020254ce00"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3e)

11:40:05 executing program 2:
link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

11:40:05 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x16, 0x1}, {0xc}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @void}, 0x3d)

11:40:05 executing program 7:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x6, &(0x7f0000000000)=[{0xa290, 0x8, 0x7f, 0x1}, {0x2, 0x8, 0x6, 0x1}, {0x8, 0x1f, 0x20, 0x73}, {0xb1, 0x3f, 0x3f, 0x8000}, {0x1, 0xa2, 0x7f}, {0x6, 0x80, 0x20, 0x2}]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x1, 0x6c, 0x6}, {0x9, 0x5, 0x2, 0x1f}, {0x7ff, 0x76, 0x40, 0x10001}, {0x200, 0xb7, 0x6, 0x4}, {0xfff, 0x8, 0x3, 0x7}, {0x8, 0x5, 0x1, 0xb689}]})
getegid()

11:40:05 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x400000000000000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:40:05 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
flock(r0, 0x5)

11:40:05 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0xf05c, 0x81, 0x2, 0x2}, {0x7, 0x2, 0x3f, 0x9}, {0x57, 0x3, 0x30, 0x10000000}]})
get_thread_area(0x0)

[ 1721.330060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1721.343273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1721.361604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:40:06 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')

11:40:06 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
flock(0xffffffffffffffff, 0x5)

11:40:06 executing program 5:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040))
get_thread_area(0x0)

11:40:06 executing program 4:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x800000000000000, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7ff}}], 0x18}}], 0x2, 0x0)

11:40:06 executing program 7:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000040)})
getegid()
read(r0, &(0x7f0000000100)=""/247, 0xf7)

11:40:06 executing program 2:
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x4, 0x7fff0000}]})
r1 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000000c0)='\x80)-$].\x00', &(0x7f0000000100)="ad", 0x1)
fcntl$dupfd(r1, 0x406, r0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x9, 0x9c, 0x1, 0xfff00000}, {0x80, 0x1, 0x0, 0x80000000}]})
unlink(&(0x7f0000000000)='./file0\x00')

[ 1721.457394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
11:40:06 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')

11:40:06 executing program 6:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
flock(0xffffffffffffffff, 0x5)

[ 1724.093836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1724.099418] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1724.102106] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1724.108015] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1724.111203] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1726.132587] Bluetooth: hci6: command tx timeout
[ 1728.179536] Bluetooth: hci6: command tx timeout
[ 1730.227661] Bluetooth: hci6: command tx timeout
[ 1732.276231] Bluetooth: hci6: command tx timeout
[ 1740.781164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1740.782302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1740.824714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1740.825841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1741.126017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1741.132749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1744.856003] kmemleak: 8 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
BUG: memory leak
unreferenced object 0xffff88801586ba00 (size 184):
  comm "syz-executor.7", pid 286, jiffies 4296378777
  hex dump (first 32 bytes):
    02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace (crc a88106d1):
    kmem_cache_alloc_noprof+0x397/0x470
    prepare_creds+0x2c/0x7e0
    copy_creds+0x7a/0xa20
    copy_process+0xf5a/0x73e0
    kernel_clone+0xea/0x820
    __do_sys_clone+0xce/0x120
    do_syscall_64+0xbf/0x360
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff88803ee7da00 (size 128):
  comm "syz-executor.7", pid 286, jiffies 4296378777
  hex dump (first 32 bytes):
    01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00  ................
  backtrace (crc 3586e13):
    __kmalloc_noprof+0x37c/0x4b0
    security_prepare_creds+0x101/0x160
    prepare_creds+0x579/0x7e0
    copy_creds+0x7a/0xa20
    copy_process+0xf5a/0x73e0
    kernel_clone+0xea/0x820
    __do_sys_clone+0xce/0x120
    do_syscall_64+0xbf/0x360
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff88801a40e800 (size 512):
  comm "syz-executor.7", pid 23851, jiffies 4296378866
  hex dump (first 32 bytes):
    c0 df d8 84 ff ff ff ff 00 00 00 00 00 00 00 00  ................
    00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00  .....N..........
  backtrace (crc 31135a8):
    __kmalloc_cache_noprof+0x3ad/0x470
    alloc_fs_context+0x58/0x9e0
    __x64_sys_fsopen+0xeb/0x240
    do_syscall_64+0xbf/0x360
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff88800c03fa00 (size 96):
  comm "syz-executor.7", pid 23851, jiffies 4296378866
  hex dump (first 32 bytes):
    e0 2b 34 88 ff ff ff ff 00 00 00 00 00 00 00 00  .+4.............
    00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff  ................
  backtrace (crc 93c4971a):
    __kmalloc_cache_noprof+0x3ad/0x470
    hugetlbfs_init_fs_context+0x45/0x410
    alloc_fs_context+0x570/0x9e0
    __x64_sys_fsopen+0xeb/0x240
    do_syscall_64+0xbf/0x360
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff88800c03f480 (size 96):
  comm "syz-executor.7", pid 23851, jiffies 4296378866
  hex dump (first 32 bytes):
    01 00 00 00 01 00 01 00 00 00 00 00 00 00 00 00  ................
    00 e2 08 0d 80 88 ff ff 00 00 00 00 00 00 00 00  ................
  backtrace (crc ed5c8095):
    __kmalloc_cache_noprof+0x3ad/0x470
    fscontext_alloc_log+0x4a/0x1b0
    __x64_sys_fsopen+0x157/0x240
    do_syscall_64+0xbf/0x360
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff88801692ea80 (size 360):
  comm "syz-executor.7", pid 23851, jiffies 4296378866
  hex dump (first 32 bytes):
    00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00  .....N..........
    ff ff ff ff ff ff ff ff a0 8e 6d 88 ff ff ff ff  ..........m.....
  backtrace (crc 82aec79b):
    kmem_cache_alloc_noprof+0x397/0x470
    alloc_empty_file+0x58/0x1e0
    alloc_file_pseudo+0x12b/0x220
    __anon_inode_getfile+0xe1/0x280
    anon_inode_getfd+0x56/0xb0
    __x64_sys_fsopen+0x18c/0x240
    do_syscall_64+0xbf/0x360
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff88802e908480 (size 16):
  comm "syz-executor.7", pid 23851, jiffies 4296378866
  hex dump (first 16 bytes):
    01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace (crc 35cdddfe):
    kmem_cache_alloc_noprof+0x397/0x470
    security_file_alloc+0x35/0x130
    init_file+0x95/0x4c0
    alloc_empty_file+0x76/0x1e0
    alloc_file_pseudo+0x12b/0x220
    __anon_inode_getfile+0xe1/0x280
    anon_inode_getfd+0x56/0xb0
    __x64_sys_fsopen+0x18c/0x240
    do_syscall_64+0xbf/0x360
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: leak checking failed

VM DIAGNOSIS:
11:40:39  Registers:
info registers vcpu 0
RAX=000000000086baa3 RBX=0000000000000000 RCX=ffffffff84b781e7 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff814c6b04 RBP=dffffc0000000000 RSP=ffffffff85a07e00
R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001
R12=ffffffff86437b50 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff84b76f1e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e55f5000 00000000 00000000
LDT=0000 fffffe3a00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd5be5cfa8 CR3=000000001aa0a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0a64656c69616620676e696b63656863
XMM02=31636e75662e6e75522e6c697475736f XMM03=00000000000000000000000000000000
XMM04=2f225b206e7572206f742064656c6961 XMM05=6c222022726f7475636578652d7a7973
XMM06=22646574707572726f632220226b6165 XMM07=31207375746174732074697865203a5d
XMM08=30203030203030203030203030203030 XMM09=2e2e2e2e2e2e2e2e2e2e202030302030
XMM10=6172746b63616220200a2e2e2e2e2e2e XMM11=65666464646335332063726328206563
XMM12=686361635f6d656d6b202020200a3a29 XMM13=0000000000000041000000c00001a000
XMM14=000000000000000c000000c000014050 XMM15=000000000000000d000000c000014060
info registers vcpu 1
RAX=0000000000afc6f5 RBX=0000000000000001 RCX=ffffffff84b781e7 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff814c6b04 RBP=dffffc0000000000 RSP=ffff888009717e58
R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001
R12=ffffffff86437b50 R13=1ffff110012e2fd2 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff84b76f1e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e56f5000 00000000 00000000
LDT=0000 ffff888000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff6e102fe60 CR3=000000000da27000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e
XMM02=2934383120657a697328203030616236 XMM03=3220646970202c22372e726f74756365
XMM04=3030202020200a2e2e2e2e2e2e2e2e2e XMM05=30203030203030203030203030203030
XMM06=3030203030203230202020200a3a2973 XMM07=6d75642078656820200a373737383733
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000